xsec-team Goto Github PK

cotopaxi

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

country-distance

cybersecurity-dfm

Data Feed Manager (news watch orchestrator to predict topic with deepdetect and store cleaned text in elasticsearch)

dpvs

DPVS is a high performance Layer-4 load balancer based on DPDK.

ehoney

e签宝安全团队积累十几年的安全经验，都将对外逐步开放，首开的Ehoney欺骗防御系统，该系统是基于云原生的欺骗防御系统，也是业界唯一开源的对标商业系统的产品，欺骗防御系统通过部署高交互高仿真蜜罐及流量代理转发，再结合自研密签及诱饵，将攻击者攻击引导到蜜罐中达到扰乱引导以及延迟攻击的效果，可以很大程度上保护业务的安全。护网必备良药

evilftp

SSRF to TCP Port Scanning, Banner and Private IP Disclosure by abusing the FTP protocol

infomap

Multi-level network clustering based on the Map Equation

mlgd

multi level tree based approach for interactive graph visualization with semantic zoom

mocs

Maps of Computer Science

natpass

新一代主机管理工具，支持web vnc和web shell

poc

Proof of Concepts

pocassist

全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：

qnsm

QNSM is network security monitoring framework based on DPDK.

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

routeros

RouterOS Security Research Tooling and Proof of Concepts

sage-test

SAGE (Subnet AGgrEgation) is a subnet-based topology discovery tool, built on top of WISE, which is able to infer the graph of a target network.

shuffle

Shuffle: The automation platform for your security stack

simhash-cluster

A cluster implementation of simhash near-duplicate detection

vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

webtech

Identify the technologies used on websites. (Dig-deep into web tech from your terminal)

wifi-protocol-fuzzing-tool

Owfuzz: a WiFi protocol fuzzing tool