superdolby Goto Github PK
Name: SuperDolby
Type: User
Name: SuperDolby
Type: User
Web path scanner
domain_hunter的内部版本
盘点近年来的数据泄露、供应链污染事件
应急响应实战笔记,一个安全工程师的自我修养。
EV: IDS Evasion via Packet Manipulation
CVE-2021-26855: PoC (Not a HoneyPoC for once!)
漏洞复现:打点漏洞、提权漏洞、内网漏洞
POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。
渗透测试报告/资料文档/渗透经验文档/安全书籍
golang 编写的 Linux HIDS。用户态 cn_proc,内核态 ebpf...Linux HIDS based on netlink connector, cn_proc & ebpf.
🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe
整理的一些hw前期准备工作 以及针对攻击者的溯源思路 水平较菜,如有错误或者遗漏的地方还请各位指正 参考资料较多 动态 IP 移动基站 代理池IP(谷歌、百度 是否有处于代理池C段) 国外扫描傀儡机(被标记时间普遍较久、扫描目标众多) 动态域名服务商(如花生壳、公云等) 域名反查whois邮箱为大批量域名注册者 普遍溯源难度较高 建议优先度降至最低 甚至舍弃
一个web信息收集工具,包括子域名收集、多线程子域名爆破、指纹信息收集、备案信息收集、可进行批量子域名收集和批量子域名爆破,,挖掘SRC的小工具
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
A malicious LDAP server for JNDI injection attacks
一款用于JNDI注入利用的工具,大量参考/引用了Rogue JNDI项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。
link is a command and control framework written in rust
A toolkit for automated log parsing [ICSE'19, TDSC'18, DSN'16]
攻击流量模拟 用于迷惑蓝队 分散蓝队精力 混淆真实攻击流量
Gitbook
渗透测试/应急响应思维导图
:atom: [WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
Nessus中文报告自动化脚本
翻译国外的@WebBreacher的安全/渗透测试/红队面试题,有部分参考作用
Open Source Security Events Metadata (OSSEM)
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.