QQQmiracle

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

aswan

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

collection-Good-information-security-list

优质安全 list

Generate-Macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

GSIL

Github Sensitive Information Leakage（Github敏感信息泄露）

HIDS

HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分osquery、另一部分监控脚本来补充osquery规则的不足； 本文是第一部分osquery规则部分，实现绝大部分主机信息监控。

kenzer

automated web assets enumeration & scanning

my-gatsby-site

my-vue-app

openrasp

Open source RASP solution

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

rhizobia_J

JAVA安全SDK及编码规范

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

v8

The official mirror of the V8 Git repository

vulhub

Docker-Compose file for vulnerability environment

XSStrike

XSStrike is an advanced XSS detection and exploitation suite.

yulong-hids

一款由 YSRC 开源的主机入侵检测系统