newbee119 Goto Github PK

attack-technique-dataset

A dataset containing APT group related articles and MITRE ATT&CK technique descriptions

check_ip

check_IP is to judge whether a IP is malicious based on open threat intelligence，基于开源威胁情报AlienVault，排查IP地址及域名的恶意性

controlxiaomidevices

This repository is a set of python scripts to control xiaomi IoT device。这个项目是一组Python脚本程序，用来控制小米智能家居设备

ctf_ics_traffic

工控CTF比赛工具，各种网络数据包处理脚本

ctf_vxworks

CTF比赛，VxWorks弱hash算法，密码碰撞解析

deceptive-document

通过在U盘中伪装正常文件，欺骗用户点击，传播木马的一个demo程序~just for fun~

firmware_analysis

物联网设备分析环境搭建与工具使用，包括脚本换阿里源、binwalk的完整安装、firmwalker和rips的使用

https_packets_decrypt

用私钥手动解HTTPS数据包的实验素材

ics-packets-analyzer

It can analyse the packets of ICS

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

iot_bot

A sample IoT bot origin from Mirai

ip-location

batch query IP location information，批量查询IP地理位置信息，解析pcap包中IP地址的地理信息

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

malware_traffic_crawler

To download malware traffic from two sources.

mechanize-email

使用mechanize对谷歌做模拟点击以及模拟点击失败之后的email通知

neopi

net-kernel

netfilter hook kernel module for IoT devices

optimize_model

本项目主要功能是自动完成特征选择与参数调试，用于优化随机森林模型，本项目的特征文件来自于文献“Two-layer detection framework with a high accuracy and efficiency for a malware family over the TLS protocol”中的部分研究。

paperfeatures

Features of distance-based method.

prefix-tree

the implementation of prefix tree and compare prefix tree with hard match

readme

README文件语法解读，即Github Flavored Markdown语法介绍

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

ssh-scanner

ssh password guessing，ssh登录密码破解

streamdump

tcp stream dump with BPF filter rules | bidirection | domain

string_match

实现并对比了各类字符串匹配算法，包括Sunday、KMP、Boyer-Moore、horspool

telnet-scanner

telnet服务密码撞库

threat-intelligence

收集的一些国外能提供提供威胁情报的公司，涵盖网络安全、工控安全、终端安全、移动安全等领域

ti_collector

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。