LI Zhenyuan's Projects
2022 护网行动 POC 整理
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
《美国反对美国》是王沪宁先生在上世纪80年代末赴美观察写作的。我们知道在那个年代**对西方特别是美国的追捧有多高,所以突然看到一个学者在80年代就有如此清楚的认识,十分钦佩。由于网上只有效果很差的PDF扫描版,所以我想利用OCR技术和肉眼(人体OCR)来转成现代化的文本格式。目前已经全部完成。
Small and highly portable detection tests based on MITRE's ATT&CK.
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
A Chinese version of Knowledge-enhanced-Attack-Graph.
Have fun with audit log analysis :)
Automated Adversary Emulation Platform
ChatGLM-6B:开源双语对话语言模型 | An Open Bilingual Dialogue Language Model
Coreference resolution for English, German and Polish, optimised for limited training data and easily extensible for further languages
Some usefull Scripts and Executables for Pentest & Forensics
Drone pentesting framework console
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Empire is a PowerShell and Python post-exploitation agent.
:cake: Desktop utility to download images/videos/music/text from various websites, and more.
Open-source code analysis platform for C/C++/Java/Binary/Javascript based on code property graphs
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports
Go engine with no human-provided knowledge, modeled after the AlphaGo Zero paper.
Config files for my GitHub profile.
AcadHomepage: A Modern and Responsive Academic Personal Homepage
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs