zhou88qiao Goto Github PK

netlink

Simple netlink library for go.

omaha

Google Update for Windows

openrasp

Open source RASP solution

osq-ext-bin

Extension to osquery windows that enhances it with real-time telemetry, log monitoring and other endpoint data collection

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

ossem

Open Source Security Events Metadata (OSSEM)

pcstat

Page Cache stat: get page cache stats for files on Linux

process-forest

Reconstruct process trees from event logs

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

psnotify

psutil

Cross-platform lib for process and system monitoring in Python

pywintrace

ETW Python Library

red_team_tool_countermeasures

rename

Come up with a name using poem in ancient China.

research-rootkit

LibZeroEvil & the Research Rootkit project.

sensitive

敏感词查找,验证,过滤和替换 🤓 FindAll, Validate, Filter and Replace words.

stock

stock

taint

Taint is a PHP extension, used for detecting XSS codes

tidefinger

TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

unhide_rootkit

unhide rootkit process and port

virtualapp

Virtual Engine for Android(Support 12.0 in business version)

volatility

An advanced memory forensics framework

webshell

This is a webshell open source project

webshell-analyzer

Web shell scanner and analyzer.

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/SSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB

xsec-ip-database

xsec-ip-database为一个恶意IP和域名库（Malicious ip database）

yargen

yarGen is a generator for YARA rules

yulong-hids

一款由 YSRC 开源的主机入侵检测系统