zhjesse Goto Github PK

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

anchore-engine

A service that analyzes docker images and scans for vulnerabilities

artillery

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

attck-pentester-book

ATTCK-PenTester-Book

awesome-devsecops

Curating the best DevSecOps resources and tooling.

awesome-incident-response

A curated list of tools for incident response

awesome-sbom

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

baseline-security-checking-shell

A shell for checking baseline security of Linux

benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

bypassbehinder

ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er

canonical-ubuntu-20.04-lts-stig-baseline

InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.

cdxgen-action

GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products

cis-ubuntu-20.04

CIS Benchmark for Ubuntu 20.04 with bats scripts

cobalt

save what you love

dependency-check_action

Github action to run dependency check

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

emergency-response-checklist

应急响应指南 / emergency response checklist

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

emergency-response-toolbox

epagneul

Graph Visualization for windows event logs

fortify

源代码漏洞の审计

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

get_subscribe

✈️ 免费机场 / 免费VPN -> 自动获取免 clash/v2ray/trojan/sr/ssr 订阅链接，间隔12小时持续更新 | 科学上网 | 翻墙

gitmad

Monitor, Alert, and Discover sensitive info and data leakage on Github.

gitminer

Tool for advanced mining for content on Github

gitmonitor

One way to continuously monitor sensitive information that could be exposed on Github

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）