secxzy Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

ctfd

CTFs as you need them

cve-2016-5195

这里保留着部分脏牛漏洞的利用代码

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dirtycow.github.io

Dirty COW

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

elastichd

Elasticsearch 可视化DashBoard, 支持Es监控、实时搜索，Index template快捷替换修改，索引列表信息查看， SQL converts to DSL等

elasticsearch-hq

Monitoring and Management Web Application for ElasticSearch instances and clusters.

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fbctf

Platform to host Capture the Flag competitions

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

go-syslog

Syslog server library for go.

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

jackson-databind-rce-poc

jumpserver

Jumpserver是全球首款完全开源的堡垒机，是符合 4A 的专业运维审计系统。

kbn_radar

Radar visualization for Kibana

lxc

LXC - Linux Containers

moby

Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

patrowlmanager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

pentest

渗透测试用到的东东

pocs

safety-project-collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

sdlchina-web

SDL China

secscan-authcheck

越权检测工具

security-data-analysis-and-visualization

2018-2020青年安全圈-活跃技术博主/博客