longspring1604 Goto Github PK

agent-libs

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

agentsmith-hids

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

awesome-endpoint-detection-and-response

Collection of tool you need to have in your Endpoint Detection and Response arsenal

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cis

linux 基线检查

cjson

Ultralightweight JSON parser in ANSI C

cnc_remastered_collection

daemon-skeleton-linux-c

Basic skeleton of a linux daemon written in C

elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

eresi

The ERESI Reverse Engineering Software Interface

intrusion-detection-wiki

krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.

linux-get-hardware-and-software-information

script for collecting hardware and software information. This tool allows users to take OS version and architecture type, information about kernel modules, default program versions, current network parameters, etc.

linux-insides

A little bit about a linux kernel

linux-vm-notes

Notes on the linux kernel VM subsystem.

linuxstack

Linux技术栈

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mimikatz

A little tool to play with Windows security

myark

模仿PCHUNTER的ARK工具

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

old-benchmarks-archive

Old CIS benchmarks archive

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

openedr

Open EDR public repository

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of https://github.com/processhacker2/processhacker.git

processmonitor

Simple programmatic Windows processes monitor.

pywintrace

ETW Python Library

rapidjson

A fast JSON parser/generator for C++ with both SAX/DOM style API

red_team_tool_countermeasures

rulecat

GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测