vanyell Goto Github PK

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

blackbox

Safely store secrets in Git/Mercurial/Subversion

certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

docker-misp

A (nearly) production ready Dockered MISP

dockerfiles

hold useful dockerfiles for testing various Docker changes

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

gitpwnd

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

iop

irm

Incident Response Methodologies

jumpserver

JumpServer 是广受欢迎的开源堡垒机，是符合 4A 规范的专业运维安全审计系统。

local-persist

Create named local volumes that persist in the location(s) you want

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕

mantis

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

monkey

Infection Monkey - An automated pentest tool

nmap-nse-vulnerability-scripts

NMAP Vulnerability Scanning Scripts

office-tool

Office Tool Plus localization projects.

prov_aws_ec2_ansible

Provision an AWS EC2 instance with Ansible

scrcpy

Display and control your Android device

sifter

*Frequently Updated. Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit them. It uses tools like blackwidow and konan for webdir enumeration and attack surface mapping rapidly using ASM.

sigma

Generic Signature Format for SIEM Systems

sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

squid-ha

tinycheck

TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere.

traefik

The Cloud Native Edge Router