cafan

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

SaiDict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

HaE

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

cobaltstrike-suricata-rules

17条检测cobaltstrike的suricata-ids规则

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

Emergency-Response-Notes

应急响应实战笔记，一个安全工程师的自我修养。

jwweb_resource

青果教务系统 虚拟机磁盘分享~ (已破解安装)

simulatelogin

青果教务管理系统的模拟登陆

awesome-linux-rootkits

awesome-linux-rootkits

RootKits-List-Download

This is the list of all rootkits found so far on github and other sites.

sliver

Adversary Emulation Framework

AttackDetection

Attack Detection

EduSrc

reverse-engineering

List of awesome reverse engineering resources

grace

:screwdriver: It's strace, with colours.

Security_Q-A

安全面试题

Programmer-look-at-China

介绍**各二线以上城市的互联网环境以及生活成本

ErKai

ErKai-开源安全项目二开计划

DAST

《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.

PL-Compiler-Resource

程序语言与编译技术相关资料（持续更新中）

namespace_and_cgroup_study

SecBooks

安全类各家文库大乱斗

Security-response-process

应急响应所有流程

theByteBook

⭐ 【开源书籍】深入讲解内核网络、Kubernetes、ServiceMesh、容器等云原生相关技术。经历实践检验的 DevOps、SRE指南。如发现错误，谢谢提issue

xss.pwnfunction.com

DOM XSS Game

container-security-site

leaky-vessels-static-detector

Static detection tool for runc and Docker "Leaky Vessels" vulnerabilities

leaky-vessels-dynamic-detector

Leaky Vessels Dynamic Detector

LinuxTQ

《Linux提权方法论》