cr4zyrain Goto Github PK

ast-hook-for-js-re

浏览器内存漫游解决方案（探索中...）

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-waf

🔥 Everything about web-application firewalls (WAF).

btfhub-archive

BTFHub Archive provides BTF files for existing published kernels that don't support embedded BTF.

chinese-poetry

The most comprehensive database of Chinese poetry 🧶最全中华古诗词数据库, 唐宋两朝近一万四千古诗人, 接近5.5万首唐诗加26万宋诗. 两宋时期1564位词人，21050首词。 🤪 😜 阿里招p6/p7 Python Golang | [email protected] | 上海张江

cis

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

idor_detect_tool

一款API水平越权漏洞检测工具

janusec

Janusec Application Gateway, Provides Fast and Secure Application Delivery (Authentication, WAF/CC, HTTPS and ACME automatic certificates). JANUSEC应用网关，提供快速、安全的应用交付（身份认证, WAF/CC, HTTPS以及ACME自动证书）。

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

openprocmon

open source process monitor

otx-python-sdk

The Python SDK for AlienVault OTX

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

redteamnotes

红队笔记

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

sysmonforlinux

tetragon

eBPF-based Security Observability and Runtime Enforcement

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

webshell

This is a webshell open source project