qqlover Goto Github PK

1book

《Web安全之机器学习入门》

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cobra

Source Code Security Audit (源代码安全审计)

contract_management_system

合同管理系统

djangoblog

🍺基于Django的博客系统

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

gsdf

A domain searcher named GoogleSSLdomainFinder - 基于谷歌SSL透明证书的子域名查询工具

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

ladon

Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 11.0内置234个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange

linux-exploit-suggester

Linux privilege escalation auditing tool

nebula

"星云"业务风控系统，主工程

nebula_doc

nebula 文档, gitbook版

nginx-rtmp-module

NGINX-based Media Streaming Server

ntopng

Web-based Traffic and Security Network Traffic Monitoring

ocsinventory-server

Communication server of OCS Inventory

online-learning-website

opencanary_web

The web management platform of honeypot

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

proxy_pool

Python爬虫代理IP池(proxy pool)

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

springcloudlearning

project for spring cloud learning

srs

SRS is a RTMP/HLS/WebRTC/SRT/GB28181 streaming cluster, high efficiency, stable and simple.

subdomainsbrute

A fast sub domain brute tool for pentesters

veil-evasion

Veil Evasion is no longer supported, use Veil 3.0!