Open Source Tools

Security tools and scripts I maintain. Data is maintained in data/tools.yaml.

• 2026FastjsonPoC Python / Java

  Fastjson 1.2.x RCE verification scanner covering 151 gadget-chain/version combinations across the known public disclosure history; confirms exploitability via out-of-band command echo.

• iChunQiu-CTF-Collector Python

  PySide6 desktop tool that collects public leaderboard data from i春秋 CTF competitions into a formatted Excel workbook.

• ZhuLongAgent Python

  Local command console for i春秋 CTF competitions: match management, attachment retrieval, and tool orchestration in one workspace.