popmedd Goto Github PK

-

恶意代码分析实战程序-PracticalMalwareAnalysis-Labs-master

-securitymanageframwork

aa

aaa

aa

aboutsecurity

用于渗透测试和红队基础设施建设的 payload 和 bypass 字典。A list of payload and bypass lists for penetration and red team infrastructure build.

accessloganylast

支持Nginx、Apache、Tomcat等标准WEB日志的分析

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

adminset

自动化运维平台：CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理

adobe-flash-phishing-page

Adobe Flash Phishing Page(Adobe Flash钓鱼页面)

ai-security-learning

自身学习的安全数据科学和ai安全算法的学习资料

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

amwiki

amWiki 是一款由 JS 开发、依赖 Atom 或 Nodejs-Npm 的 Markdown 轻量级前端化开源文库系统

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

android-penetration

there are some guidelines for us to do penetration on Android application

android_app_security_checklist

Android App Security Checklist

androidchecklist

Android应用审计checklist整理

androidsecnotes

some learning notes about Android Security

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

appium

appium

apt_sample-weapoon

Pull some collected APT group related samples, ransomware, remote control and other malicious programs for security researchers to use.

arachni

Web Application Security Scanner Framework

archerysec

Open Source Vulnerability Assessment and Management helps developers and pentesters to perform scans and manage vulnerabilities.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

artifacts-kit

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

assetscan

资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行