xiaofengtongxue Goto Github PK

-baseline-check

windows和linux基线检查，配套自动化检查脚本。纯手打。

3xp10it

agentsmith-hids

Low performance loss and by LKM technology HIDS tool.from Dianrong InfoSEC team.

alb

攻击日志分析工具

aliyun-safe-match

Webshell和钓鱼网站检测（阿里云安全算法挑战赛 第29名）

all-in-one

For detail, see the wiki

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

android-open-project

Collect and classify android open source projects 微信公众号：codekk

androidsdksourceanalysis

android sdk 源码解析——旨在帮助Android开发者更好的学习Android！我们只是一群普通的程序员，但是，我们热爱分享，想热热闹闹的玩点有意义的事！如果你也想陪我们一起愉快的玩耍，欢迎加入我们！Issues认领分析文章！

apache_shiro_1.2.4_rce

Apache shiro <= 1.2.4 rememberMe 反序列化漏洞利用工具

api-front

api统一前端、转发代理、协议分析、流量复制

apkanalyser

apkanalysermodules

This is an apk file analysis system

apkinspector

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

aptnotes

Various public documents, whitepapers and articles about APT campaigns

attackfilter

Logstash 日志安全攻击分析插件

awesome-cloud-security

awesome cloud security || 收集一些国内外不错的云安全资源，主要是国内

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesome-mac

 This repo is a collection of awesome Mac applications and tools for developers and designers.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-waf

🔥 A curated list of awesome web-app firewall (WAF) stuff.

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

behinder

“冰蝎”动态二进制加密网站管理客户端

bkscanner

BkScanner 分布式、插件化web漏洞扫描器

blackips

开源威胁情报，包含3个组件，2个查询API，1个前端，300万+恶意IP，Go +Redis开发的威胁情报查询API性能良好。

blog

test

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bosun

Time Series Alerting Framework