2022-hw-poc

2022 护网行动 POC 整理

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

america-against-america

《美国反对美国》是王沪宁先生在上世纪80年代末赴美观察写作的。我们知道在那个年代**对西方特别是美国的追捧有多高，所以突然看到一个学者在80年代就有如此清楚的认识，十分钦佩。由于网上只有效果很差的PDF扫描版，所以我想利用OCR技术和肉眼（人体OCR）来转成现代化的文本格式。目前已经全部完成。

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

attackg-for-chinese

A Chinese version of Knowledge-enhanced-Attack-Graph.

audit-log-analysis

Have fun with audit log analysis :)

caldera

Automated Adversary Emulation Platform

chatglm-6b

ChatGLM-6B：开源双语对话语言模型 | An Open Bilingual Dialogue Language Model

coreferee

Coreference resolution for English, German and Polish, optimised for limited training data and easily extensible for further languages

creds

Some usefull Scripts and Executables for Pentest & Forensics

depcomm

dronesploit

Drone pentesting framework console

ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

effective-and-light-weight-deobfuscation-and-semantic-aware-attack-detection-for-powershell-scripts

empire

Empire is a PowerShell and Python post-exploitation agent.

extractor

flowcog

hitomi-downloader

:cake: Desktop utility to download images/videos/music/text from various websites, and more.

joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript based on code property graphs

kestrel-lang

Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.

knowledge-enhanced-attack-graph

AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports

krystal

leela-zero

Go engine with no human-provided knowledge, modeled after the AlphaGo Zero paper.

li-zhenyuan

Config files for my GitHub profile.

li-zhenyuan.github.io

AcadHomepage: A Modern and Responsive Academic Personal Homepage

li-zhenyuan.github.io_bk

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

m_downlink

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs