ReAbout/web-sec resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1943 stars · 276 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A continuously updated Chinese-language web security handbook (red team skill stack) organized as a curated knowledge base covering vulnerability understanding, exploitation, code auditing, and penetration testing. It provides quick-reference matrices mapping vulnerability classes like XSS, SSRF, SQLi, SSTI, and deserialization to exploitation notes, payloads, and defense points.

Use cases

• look up exploitation techniques for XSS, CSRF, SSRF, or SQL injection during a pentest
• study how web vulnerabilities work and their preconditions before practicing
• find payloads and bypass techniques for WAF, CSP, or SameSite protections
• review Java deserialization, SpEL, OGNL, and JNDI exploitation chains
• prepare for CTF web challenges with a quick reference of common web attacks
• learn privilege escalation and post-exploitation steps on Windows and Linux
• use as a retrieval corpus for AI-assisted security question answering

When to choose

• you need a curated, continuously updated reference for web vulnerability exploitation and red team workflows
• you want organized cheat sheets mapping vulnerability classes to conditions, exploit chains, and defenses
• you are doing code audits or penetration tests and need fast lookup of attack techniques

When to avoid

• you need runnable security tooling rather than documentation and notes
• you require an officially licensed or formally maintained curriculum rather than a personal knowledge compilation
• you need beginner-friendly step-by-step tutorials with no prior security background

Facets

learning-resource · maturity active

security penetration-testing documentation developer-tools security penetration-testing web-development awesome-lists tutorials cross-platform web-security red-team cheatsheet vulnerability-exploitation code-audit pentest-handbook xss sqli ssrf deserialization

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ReAbout/web-sec")