saliva2 Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2019_vul_warning_poc_collect

整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善

aktaion2

Aktaion is a machine learning open source & active defense (orchestration) prototype. The tool focuses on the detection of exploits based on machine learning techniques, independent of static-based signatures.

anti-anti-spider

越来越多的网站具有反爬虫特性，有的用图片隐藏关键数据，有的使用反人类的验证码，建立反反爬虫的代码仓库，通过与不同特性的网站做斗争（无恶意）提高技术。（欢迎提交难以采集的网站）（因工作原因，项目暂停）

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

arissploit

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

assetmanage

attackdetection

Attack Detection

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-programming-books

经典编程书籍大全，涵盖：计算机系统与网络、系统架构、算法与数据结构、前端开发、后端开发、移动开发、数据库、测试、项目与团队、程序员职业修炼、求职面试等

beacondetector

An iOS app that can detect an iBeacon. This app acts as an example Museum app that will display details of an art exhibit when near the exhibit's beacons.

binwalk

Firmware Analysis Tool

blog

基于 Django1.11 和 Wordpress 主题开发的个人博客网站

boofuzz

A fork and successor of the Sulley Fuzzing Framework

bountyhunterinchina

重生之我是赏金猎人系列，分享自己和团队在SRC、项目实战漏洞测试过程中的有趣案例

caldera

Automated Adversary Emulation Platform

cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

cheap-vpn-recommendation

cset

Cybersecurity Evaluation Tool

ctf-docker-template

Deployment template for docker target machine in ctf for CTFd and other platforms that support dynamic flags

ctfd

CTFs as you need them

cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2021-40444

CVE-2021-40444 PoC

data-analysis

资料分享

decoymini

🐝 A highly scalable, safe, free enterprise honeypots 一款高可扩展、安全、免费的企业级蜜罐系统

dga-collection

A collection of known Domain Generation Algorithms

django-imagekit

Automated image processing for Django. Currently v4.0

django-rest-framework-documentation

Django REST framework 中文文档