chennqqi's repositories
boreal
YARA rules evaluator in Rust
BypassAntiVirus
远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。
Cloak
A censorship circumvention tool to evade detection by authoritarian state adversaries
d-eyes
D-Eyes为绿盟科技一款检测与响应工具
EasySpider
A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。
ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
eBPFeXPLOIT
Exploit tool implemented using ebpf.
ehids-agent
A Linux Host-based Intrusion Detection System based on eBPF.
ElasticView
这是一个轻便的ElasticSearch可视化客户端
go-bitflags
Bitflags is a tool to automate generate code which behave like a set of bitflags
kunwu
kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略
Message-Push-Nest
🕊️ Message Nest - 打造个性化消息推送平台，整合邮件、钉钉、企业微信、自定义webhook等多种通知方式。定制你的消息，让通知方式更灵活多样。 🕊️ Message Nest - Craft your personalized message push hub, seamlessly integrating notifications from emails dtalk and so on. Tailor your messages for a flexible and diverse notification experience.
Mitigating-Web-Shells
Guidance for mitigation web shells. #nsacyber
nemo_go
Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。
nginx_shell
nginx WebShell/内存马，更优雅的nignx backdoor
ovpn-admin
Simple web UI to manage OpenVPN users.
RevokeMsgPatcher
:trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）
SearchAvailableExe
寻找可利用的白文件
selfextract
Self-extracting archives creation tool
siglens
100x Efficient Log Management than Splunk :rocket: Reduce your observability cost by 90%
WindowsBaselineAssistant
Windows安全基线核查加固助手
yara-forge
Automated YARA Rule Standardization and Quality Assurance Tool