huangzhe312 / sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

数据--所有

数据--年度

202004 信息源与信息类型占比

微信公众号 推荐

nickname_english	weixin_no	title	url
VIPKID安全响应中心	vk_src	【技术分享】基于数据流的越权检测	https://mp.weixin.qq.com/s/FC6ROeMAdGUxkjVjFd914A
heysec	bloodzer007	一次有趣的钓鱼测试	https://mp.weixin.qq.com/s/JZs26mle8diovfPpAggP7A
qz安全情报分析	lookvul	关于防守方封IP的一些想法	https://mp.weixin.qq.com/s/pgaTlc8LoUvH7RtgeKCBrg
白帽汇	baimaohui888	打“怪”升级的靶场——Vulfocus	https://mp.weixin.qq.com/s/ArDDWYuc1A64qUzeyPRzZA
雷神众测	thorsrc	近源渗透测试之USBninja实战	https://mp.weixin.qq.com/s/qCA-6zXbwpj8nyn5791zfg
黑金笔谈	heijinbitan	Windows域环境及域渗透知识分享	https://mp.weixin.qq.com/s/gvDzKFIsdhtkOKRANscEJA
君哥的体历	jungedetili	钱君生：安全架构设计与评审	https://mp.weixin.qq.com/s/PXCr_QrV7iLUz44750JXcA
VMware**研发中心	vmwarechinard	使用FATE进行图片识别的深度神经网络联邦学习	https://mp.weixin.qq.com/s/wlB8Hz4nTgz9zEP3OEQDAQ
vessial的安全Trash Can	vx_security	移动基带安全研究系列文章之概念与系统篇	https://mp.weixin.qq.com/s/YYicKHHZuI4Hgyw25AvFsQ
**白客联盟	China_Baiker	渗透中的后门利用	https://mp.weixin.qq.com/s/EfzSC979qQqXxXLZsV9LpA
**警察网	zgjcwcpd	公安部公布十起侵犯公民个人信息违法犯罪典型案件	https://mp.weixin.qq.com/s/3P4zEOepOxBETOcvBYhpDA
中睿天下	zorelworld	干货	一次对钓鱼邮件攻击者的溯源分析
美团安全应急响应中心		复杂风控场景下，如何打造一款高效的规则引擎	https://mp.weixin.qq.com/s/m4jFHUP3JYF9Z8TUxi9UIg
腾讯御见威胁情报中心		微软发布字体解析远程代码执行漏洞补丁，建议用户尽快修补	https://mp.weixin.qq.com/s/RvTZWvcXiXsI7xB6L9RWIg
404 Not F0und		我对安全与NLP的实践和思考	https://mp.weixin.qq.com/s/_q5s1fHc0DB3feSd4gQZyw
**信息安全	chinainfosec	专题·原创	国际网络安全应急响应体系介绍
信息通信技术与政策	caict_dsc	APT供应链攻击防护应对分析及意义	https://mp.weixin.qq.com/s/qGMRjCeIyHSHk_aXI8Fxbg
永安在线反欺诈	YongAnOnline	永安在线	生鲜电商拉新场景业务安全测评报告
绿盟科技研究通讯	nsfocus_research	Provenance Mining：终端溯源数据挖掘与威胁狩猎	https://mp.weixin.qq.com/s/Te7c3HvCcxX3ci9HTn8lEQ
腾讯安全应急响应中心	tsrc_team	网络层绕过IDS/IPS的一些探索	https://mp.weixin.qq.com/s/QJeW7K-KThYHggWtJ-Fh3w
腾讯安全智能	TX_Security_AI	基于SOC机器学习检测平台的行为分析建模---HTTP隐蔽通信检测	https://mp.weixin.qq.com/s/ggFbaQvn8yUJOFi_-DPNOw
ChaMd5安全团队	chamd5sec	领略cdn绕过的魅力	https://mp.weixin.qq.com/s/7wpQXujqKk03GghPbmiwMw
漏洞战争	vulwar	关于Adobe PDF 0day的故事	https://mp.weixin.qq.com/s/fx8MQ8ZMhZHwrruigLFbGA
Tide安全团队	TideSec	【红蓝对抗】内网渗透-域环境权限维持	https://mp.weixin.qq.com/s/sSx9ugLPAdfg1G6_AZ0l5w
360CERT	CERT-360	“震网”三代和二代漏洞技术分析报告	https://mp.weixin.qq.com/s/qc25c_nuUax6UoknAVLrAw
Ms08067安全实验室	Ms08067_com	六种bypass安全软件防护执行的方式	https://mp.weixin.qq.com/s/sfxJbyJMB6FyGfa6H0G3hA
云众可信	yunzhongkexin	原创干货	对某大型企业的一次web漏洞挖掘过程
关注安全技术	heresecurity	常见的web容器后门笔记	https://mp.weixin.qq.com/s/-cmM1k3--H6p1ditfQHPEw
小议安全	xiaoyianquan	零信任架构实战系列：干掉密码，无密码化方案落地	https://mp.weixin.qq.com/s/xs-xybNs6Ha6_-Qr_EE-qw
网安国际	inforsec	【InForSec通讯】安全漏洞报告的差异性测量	Usenix Security2019
锦行信息安全	jeeseensec	浅析HTTP走私攻击	https://mp.weixin.qq.com/s/IMZrvJGQjcLBZS74kMWRnA
国防科技要闻	CDSTIC	2021财年DARPA预算概况及发展动向解析	https://mp.weixin.qq.com/s/yEsrMmI0BpvllXaf3TBWkw
大路咨询	daluzixun	**工业网络安全厂商综合能力概览（2020年第1期）	https://mp.weixin.qq.com/s/6i17MV8T3rou8j0rY-ZbIQ

组织github账号 推荐

github_id	title	url	org_url	org_profile	org_geo	org_repositories	org_people	org_projects	repo_lang	repo_star	repo_forks

私人github账号 推荐

github_id	title	url	p_url	p_profile	p_loc	p_company	p_repositories	p_projects	p_stars	p_followers	p_following	repo_lang	repo_star	repo_forks
tandasat	在 Hyper-V 环境中测试 UEFI	https://github.com/tandasat/MiniVisorPkg/blob/master/Docs/Testing_UEFI_on_Hyper-V.md	http://standa-note.blogspot.ca/	Engineer @standa_t	Vancouver, Canada	None	58	0	19	668	3	C,C++	777	245
qazbnm456	awesome-web-security: List of Web Security materials and resources	https://github.com/qazbnm456/awesome-web-security	https://www.patreon.com/boik	https://www.boik.com.tw/	Taiwan	None	109	0	1100	550	20	Python,JavaScript	4700	907
djhohnstein	SharpChromium - 用于从 Chromium 系列浏览器中获取 Cookie、访问历史、网站登录凭据等敏感信息的工具	https://github.com/djhohnstein/SharpChromium	https://github.com/specterops	Operator at SpecterOps. Kali Contributor.	Seattle, WA	@specterops	123	0	10	288	6	C#,VBScript,C++	104	23
haidragon	haidragon/KiwiVM-1: virtualization encryption software for...	https://github.com/haidragon/KiwiVM-1	http://weibo.com/haidragon	QQ交流群 : 826038086	** 北京	None	1200	0	57	227	532	C,JavaScript,C++	87	31
Wenzel	虚拟化及虚拟化安全相关的资料整理	https://github.com/Wenzel/awesome-virtualization	None	Security Researcher	VMI hypervisor-level debugger	Paris, France	None	110	0	363	192	104	Python,Ruby,Rust	517
citronneur	rdp-rs: Remote Desktop Protocol in RUST	https://github.com/citronneur/rdp-rs	https://github.com/airbus-cert		Toulouse, France	@airbus-cert	24	0	284	159	102	Python,C#,JavaScript,Rust	1200	305
wcventure	MemLock: Memory Usage Guided Fuzzing	https://github.com/wcventure/MemLock-Fuzz	https://wcventure.github.io/	Computer Software and Theory, Software Engineering, Machine Learning, Formal Method, Program Analysis, Software Verification, Cyber Security.	Shenzhen, Guangdong Province, China, 518060	Shenzhen University	15	0	98	138	14	Python,C,Batchfile	244	36
gobysec	Goby新一代安全测试工具	https://github.com/gobysec/Goby	http://gobies.org	Goby - Make Cybersecurity More Effective The new generation of network security technology	None	Goby	7	0	1	128	0	Python,Go	73	9
DimitriFourny	macOS/iOS CVE-2019-6207 内核信息泄漏的 PoC 代码	https://github.com/DimitriFourny/cve-2019-6207	https://dimitrifourny.github.io	French security researcher.	None	None	17	0	70	69	6	Python,C,C++	62	13
bohops	GhostBuild - MSBuild launchers for various GhostPack/.NET ...	https://github.com/bohops/GhostBuild	http://bohops.com		None	None	9	0	31	59	2	Python,PowerShell	105	17
pventuzelo	WARF - WebAssembly Runtimes Fuzzing project	https://github.com/pventuzelo/wasm_runtimes_fuzzing	https://webassembly-security.com/	Independent Security Researcher, Trainer of WebAssembly & Rust Security, mainly focused on Fuzzing, Vulnerability Research, Reversing & Binary analysis	Paris, France	Independent Security Researcher	40	0	254	53	55	Python,WebAssembly,JavaScript,HTML,Rust	230	38
nafod	nafod 公开了自己 VMware UHCI ZDI-19-421 漏洞的 Exploit	https://github.com/nafod/advent-vmpwn//	None		None	None	15	0	117	44	24	C,JavaScript	5	1
ph4ntonn	Stowaway -- Multi-hop Proxy Tool for pentesters	https://github.com/ph4ntonn/Stowaway	None	The wheel turns,nothing is ever new	0x7F000001	Unknown	32	0	36	39	17	Go,Python,C,JavaScript	157	26
assafmo	joincap: Merge multiple pcap files together, gracefully.	https://github.com/assafmo/joincap	https://github.com/enigmampc		Israel	@enigmampc	25	0	270	35	18	Go,JavaScript	140	12
S1lkys	XAMPP 本地提权漏洞分析（CVE-2020-11107）	https://github.com/S1lkys/CVE-2020-11107/	None		None	None	27	0	1	23	0	Python,Shell	12	3
yardenshafir	KernelDataStructureFinder - 在内核 lookaside 链表中搜索数据结构的工具	https://github.com/yardenshafir/KernelDataStructureFinder	None		None	None	5	0	2	22	0	C,C++	40	20
mrlnc	禁用LTE网络安全性-商业网络中的配置错误安全研究分享。	https://github.com/mrlnc/LTE-ciphercheck	None	Research Assistant & PhD student. Mobile Network Security at Ruhr-Universität Bochum.	Bochum, Germany	Ruhr-Universität Bochum	15	0	26	18	30	C++	36	13
chrivers	三星SSD固件文件解密工具Samsung Firmware Magic发布	https://github.com/chrivers/samsung-firmware-magic	http://christianiversenit.dk		Denmark	Iversen IT	23	0	15	13	6	Python,HTML,Smarty	135	20
Tera0017	APT组织TA505所使用的SDBbot RAT解包工具发布，支持x86和x64	https://github.com/Tera0017/SDBbot-Unpacker	None	I dont get it.	None	None	3	0	0	6	0	Python	38	4
Martyx00	Assistant plugin for vulnerability research	https://github.com/Martyx00/VulnFanatic	None		None	None	4	0	2	5	0	Python,Objective-C,Shell	26	4
weizman	WhatsApp Desktop 0.3.9309 之前版本 XSS 漏洞分析	https://github.com/weizman/CVE-2019-18426	http://www.weizmangal.com	javascript expert and web security enthusiastic :)	Israel	https://www.perimeterx.com	8	0	3	4	1	JavaScript	5	1
QAX-A-Team	sharpwmi: 基于RPC的横向移动工具	https://github.com/QAX-A-Team/sharpwmi	None	None	None	None	0	0	0	0	0	C,Shell,Java,C#,C++,Python,Go,PowerShell	0	0
ail-project	AIL - 用于从类 Pastebin 网站中分析信息泄漏数据的框架	https://github.com/ail-project/ail-framework	None	None	None	None	0	0	0	0	0	Python	6	0
aind-containers	AinD: Android (Anbox) in Docker，在 Docker 中运行 Android apps	https://github.com/aind-containers/aind	None	None	None	None	0	0	0	0	0	Dockerfile	0	0
appsecco	Attacking and Auditing Docker Containers and Kubernetes Cl...	https://github.com/appsecco/attacking-and-auditing-docker-containers-and-kubernetes-clusters	None	None	None	None	0	0	0	0	0	Shell,Java,Python,JavaScript,C#,Visual,HTML,ActionScript,PHP,CSS	540	150
ffffffff0x	Dork-Admin: 盘点近年来的数据泄露、供应链污染事件	https://github.com/ffffffff0x/Dork-Admin	None	None	None	None	0	0	0	0	0	HTML,Java	0	0
fofapro	基于 Docker 镜像的漏洞靶场平台	https://github.com/fofapro/vulfocus	None	None	None	None	0	0	0	0	0	C,Vue,Java,Python,Go,CSS	169	19
seemoo-lab	Frankenstein - 用于为无线设备固件提供模拟执行和 Fuzz 环境的框架	https://github.com/seemoo-lab/frankenstein/	None	None	None	None	0	0	0	0	0	C,Shell,Jupyter,Python,JavaScript,TeX,Objective-C,HTML,MATLAB,Java	4100	296
sibears	用于修改 IDA HexRays AST 的工具	https://github.com/sibears/HRAST	None	None	None	None	0	0	0	0	0	Python,JavaScript,HTML,CSS	0	0

medium_xuanwu 推荐

title	url
Build your first LLVM Obfuscator	http://medium.com/@polarply/build-your-first-llvm-obfuscator-80d16583392b
写给入门者的 Web RCE 漏洞利用案例分析	http://medium.com/bugbountywriteup/simple-remote-code-execution-vulnerability-examples-for-beginners-985867878311?source=rss----7b722bfd1b8d---4
CVE-2020-0796 Windows SMBv3 LPE漏洞 POC详细分析	http://medium.com/@knownsec404team/cve-2020-0796-windows-smbv3-lpe-exploit-poc-analysis-c77569124c87

medium_secwiki 推荐

title	url
Lateral Movement: PowerShell Remoting	https://medium.com/@subhammisra45/lateral-movement-powershell-remoting-89da402a9885
Everything You Need to Know About IDOR	https://medium.com/@aysebilgegunduz/everything-you-need-to-know-about-idor-insecure-direct-object-references-375f83e03a87
CATBERT — Detecting malicious emails with a bleeding-edge...	https://medium.com/@sophos.ai/detecting-malicious-emails-with-a-bleeding-edge-neural-language-model-355b366d8940

zhihu_xuanwu 推荐

title	url

zhihu_secwiki 推荐

title	url
从Google内部安全架构设计看威胁情报与威胁狩猎的应用场景	https://zhuanlan.zhihu.com/p/129064940

日更新程序

python update_daily.py