LightONEWAY

LightONEWAY's Stars

• FeeiCN/SecurityInterviewGuide

  网络信息安全从业者面试指南

  1.4k145

• OpenCTI-Platform/opencti

  Open Cyber Threat Intelligence Platform

  Language:TypeScript6.4k945

• RemusDBD/ctftools-all-in-one

  市场上虽然存在大量的网络安全工具和软件，但它们大多针对某一特定领域或功能，缺乏一个统一的、集成的、易于使用的综合工具平台。这导致参赛者在CTF竞赛中需要频繁切换不同的工具，不仅降低了工作效率，还增加了操作失误的风险。由gitee转发 ↓

  Language:C17217

• CloudExplorer-Dev/CloudExplorer-Lite

  开源的轻量级云管平台

  Language:Java65093

• fit2cloud/riskscanner

  RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

  Language:Java1.1k185

• tdragon6/Supershell

  Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

  1.5k188

• SpecterOps/Nemesis

  An offensive data enrichment pipeline

  Language:Python61459

• VisionRush/DeepFakeDefenders

  Image forgery recognition algorithm

  Language:Python57471

• BishopFox/sliver

  Adversary Emulation Framework

  Language:Go8.5k1.1k

• uknowsec/Active-Directory-Pentest-Notes

  个人域渗透学习笔记

  1.7k359

• Threekiii/Awesome-Redteam

  一个攻防知识仓库 Red Teaming and Offensive Security

  Language:Python3.6k636

• BC-SECURITY/Empire

  Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

  Language:PowerShell4.3k579

• darmado/Atomic-Red-Team-C2

  ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

  Language:Python17122

• mitre/caldera

  Automated Adversary Emulation Platform

  Language:Python5.6k1.1k

• redcanaryco/atomic-red-team

  Small and highly portable detection tests based on MITRE's ATT&CK.

  Language:C9.8k2.8k

• jonrau1/ElectricEye

  ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

  Language:Python953126

• someengineering/cloud-security-list

  A list of cloud security tools and vendors.

  13522

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go12.1k1.9k

• Autumn-27/ScopeSentry

  ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

  Language:Python762115

• XTeam-Wing/X-Marshal

  Marshal-EASM 攻击面管理系统-社区版

  1035

• burpheart/koko-moni

  一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗

  44022

• fr0gger/Awesome-GPT-Agents

  A curated list of GPT agents for cybersecurity

  5.7k617

• Symph0nia/CyberEdge

  互联网资产综合扫描/攻击面测绘

  Language:Python22022

• knownsec/404StarLink

  404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

  8.5k822

• FunnyWolf/Viper

  Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

  3.7k528

• 0xbug/biu

  网络资产攻击面梳理

  38842

• holyshell/Books

  Some special ebooks

  918244

• atiilla/geospy

  Python tool using Graylark's AI-powered geo-location service to uncover the location where photos were taken.

  Language:Python19725

• cloud-custodian/cloud-custodian

  Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

  Language:Python5.5k1.5k

• cloudquery/cloudquery

  The open source high performance ELT framework powered by Apache Arrow

  Language:Go5.9k514