praifire Goto Github PK

-baseline-check

windows和linux基线检查，配套自动化检查脚本。纯手打。

010editor-keygen

A keygen for 010Editor

100-cybersecurity-principle

百大安全原则宝典-遵循100条安全原则来指定安全策略

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

authmatrix

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

burpsuite

BurpSuite using the document and some extensions

captipper

Malicious HTTP traffic explorer

classifiedprotection

cms-hunter

CMS漏洞测试用例集合

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

dns_sniff

This program was designed to sniff DNS response packet on a Linux machine and print the domain and IP of each entry

docker-security

docker 安全基线规范

dvwa

Damn Vulnerable Web Application (DVWA)

ebook

classic books of computer science

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

enterprise_security_build--open_source

甲方企业安全建设开源之路

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

how-to-ask-questions-the-smart-way

本文原文由知名 Hacker Eric S. Raymond 所撰寫，教你如何正確的提出技術問題並獲得你滿意的答案。

intrusion-detection-manually

手动检测是否被入侵

iqiyi_security_conference_2018

第一届爱奇艺安全沙龙 议题PPT分享

java-sec-code

Java常见通用漏洞和修复的代码以及利用payload

jdsrc-small-classroom

京东SRC小课堂系列文章

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

linux

linux安全检查

linux-exploit-development-tutorial

a series tutorial for linux exploit development to newbie.

linux_information

自动化收集linux信息

linuxcheck

linux信息收集/应急响应/常见后门检测脚本

linuxcheck-01

Linux主机安全检查，安照比较关心的项来写的shell脚本

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log