int2ecall Goto Github PK

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

changedetection.io

The best and simplest self-hosted free open source website change detection, monitor and notification service. Restock Monitor, change detection. Designed for simplicity - the main goal is to simply monitor which websites had a text change for free. Free Open source web page change detection, Restock Monitoring, Visualping and Apify alternative

chart-testing

CLI tool for linting and testing Helm charts

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

checkpwd

Check the default pwd of product via checklist.

chisel

A fast TCP/UDP tunnel over HTTP

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

chrome_v8_ndays

Chrome V8 n-day exploits that I've written.

cilium

eBPF-based Networking, Security, and Observability

cis-benchmarks

CIS Benchmarks as of 20/05/2020

cis-docker-benchmark

CIS Docker Benchmark - InSpec Profile

cis-ubuntu-20.04-ansible

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

clamav-yara

Converts the Clamav Virus Database definitions to YARA rules [GOLANG]

clash_for_windows_pkg

A Windows/macOS GUI based on Clash

cliramdisk

A reduced functionality cli client for the imdisk ram disk driver. To be used through a backdoor like meterpreter

cloud-bucket-leak-detection-tools

六大云存储，泄露利用检测工具

cloud-native-security

云原生安全

cloud-security

云安全

cloud-security-guides

cloud-security-pdf

收集云安全相关的PDF文件

cloud_native_security_test_case

一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]

cloudaudittool

云安全审计工具

cloudkeykiller

阿里云AK泄露利用工具

cloudrasp-log4j2

一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.

cloudsec

云安全利用工具-云平台AK/SK-WEB利用工具，添加AK/SK自动检测资源，无需手动执行，支持云服务器、存储桶、数据库操作

cloudsploit

Cloud Security Posture Management (CSPM)

cms

1.cms 网站 ,完整开源建站平台。cms网站，拥有微信公众号模块，可以加入微信公众号使用。用于咨询网站、企业网网站，个人小网站等等。可以自己开发模板放在template目录文件夹下。也适合二次开发，完整的权限系统。2.使用技术spring4 +freemarker+ shrio + ehcache + mybatis + MYSQL + H-ui.admin + Amaze UI，可以在Tomcat，jetty跑。3.环境要求：maven 版本3.3.9+，JDK1.7+(推荐1.8），mysql5.6+

cms-hunter

CMS漏洞测试用例集合

cnvd-2022-10270-lpe

基于向日葵RCE的本地权限提升，无需指定端口