Key20's Stars
decoymini/DecoyMini
🐝 A highly scalable, safe, free enterprise honeypots 一款高可扩展、安全、免费的企业级蜜罐系统
metlo-labs/metlo
Metlo is an open-source API security platform.
tongcheng-security-team/NextScan
飞刃是一套完整的企业级黑盒漏洞扫描系统,集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库,覆盖多种漏洞类型和应用程序框架。
b0bac/ApolloScanner
自动化巡航扫描框架(可用于红队打点评估)
projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
ASTTeam/CodeQL
《深入理解CodeQL》Finding vulnerabilities with CodeQL.
zhengjim/camille
基于Frida的Android App隐私合规检测辅助工具
luckyfuture0177/ReZeroBypassAV
从零开始学免杀
Maskhe/javasec
自己学习java安全的一些总结,主要是安全审计相关
MrWQ/vulnerability-paper
收集的文章 https://mrwq.github.io/tools/paper/
FeeiCN/Security-PPT
Security-related Slide Presentation & Security Research Report(大安全各领域各公司各会议分享的PPT以及各类安全研究报告)
Key20/Security-PPT
大安全各领域各公司各会议分享的PPT
Tencent/CodeAnalysis
Static Code Analysis - 静态代码分析
ethereumbook/ethereumbook
Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood
hanc00l/nemo_go
Nemo是用来进行自动化信息收集的一个简单平台,通过集成常用的信息收集工具和技术,实现对内网及互联网资产信息的自动收集,提高隐患排查和渗透测试的工作效率。
awake1t/HackReport
渗透测试报告/资料文档/渗透经验文档/安全书籍
e-m-b-a/embark
EMBArk - The firmware security scanning environment
jiushill/csplugin
自己开的cs插件
G-Security-Team/GSLibrary
轻量级知识库&POC管理平台
kbandla/APTnotes
Various public documents, whitepapers and articles about APT campaigns
mantvydasb/RedTeaming-Tactics-and-Techniques
Red Teaming Tactics and Techniques
Telefonica/HomePWN
HomePwn - Swiss Army Knife for Pentesting of IoT Devices
woolabs/Woobuntu
jeffzh3ng/fuxi
Penetration Testing Platform
Key20/Fuxi-Scanner
Network Security Vulnerability Scanner
creditease-sec/insight
洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
mempodippy/vlany
Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
Key20/vlany
Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
NullArray/AutoSploit
Automated Mass Exploiter
coffeehb/struts2_check
一个用于识别目标网站是否采用Struts2框架开发的工具demo