Lists (16)
Stars
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
为GPT/GLM等LLM大语言模型提供实用化交互接口，特别优化论文阅读/润色/写作体验，模块化设计，支持自定义快捷按钮&函数插件，支持Python和C++等项目剖析&自译解功能，PDF/LaTex论文翻译&总结功能，支持并行问询多种LLM模型，支持chatglm3等本地模型。接入通义千问, deepseekcoder, 讯飞星火, 文心一言, llama2, rwkv, claude2, m…
[验证码识别-训练] This project is based on CNN/ResNet/DenseNet+GRU/LSTM+CTC/CrossEntropy to realize verification code identification. This project is only for training the model.
OWASP Web Application Security Testing Checklist
An AI agent development platform with all-in-one visual tools, simplifying agent creation, debugging, and deployment like never before. Coze your way to AI Agent creation.
All-in-One Development Tool based on PaddlePaddle
A plugin that allows you execute python and get return to BurpSuite.
基于函数级污点分析的 Java 源代码漏洞审计工具JavaSinkTracer，通过 Model Context Protocol (MCP) 为 AI 助手提供安全分析能力。
《Agentic Design Patterns》中文翻译版
A keyword based crawler for WeChat Mini-apps
开放式跨端跨框架解决方案，支持使用 React/Vue 等框架来开发微信/京东/百度/支付宝/字节跳动/ QQ 小程序/H5/React Native 等应用。 https://taro.zone/
API Billing Gateway 开源API计费网关 基于 Koa.js 的高性能 API 计费系统，支持按月计费和按调用量计费。
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Automatic SSTI detection tool with interactive interface
这是一款图形化的代码审计工具，支持对规则进行增删改查。可协助代码审计人员在日常代审中对于规则的积累。其中配置页面可配置：审计文件后缀、审计路径关键字、禁止审计路径关键字。支持 java php net项目审计。
Java web common vulnerabilities and security code which is base on springboot and spring security
AgentCPM-GUI: An on-device GUI agent for operating Android apps, enhancing reasoning ability with reinforcement fine-tuning for efficient task execution.
Android Virtual Keyboard Input via ADB (Useful for Test Automation)
Android Reverse-Engineering Workbench for VS Code