coca1ne

Coca1ne's repositories

APT_CyberCriminal_Campagin_Collections

APT & CyberCriminal Campaign Collection

Language:YARA1 10

badusb2-mitm-poc

BadUSB 2.0 USB-HID MiTM POC

Language:PythonGPL-3.01 10

bandit

Python AST-based static analyzer from OpenStack Security Group

Language:PythonApache-2.01 20

《数据安全架构设计与实战》：本书系统性地介绍数据安全架构的设计与实践，融入了作者多年在安全领域积累的实践经验。全书分四大部分，共20章。第一部分介绍安全架构的基础知识，内容包括安全、数据安全、安全架构、5A方法论、CIA等基本概念,为后续论述奠定基础。第二部分介绍产品安全架构，内容包括：身份认证、授权、访问控制、审计、资产保护等，讲解如何从源头设计来保障数据安全和隐私安全，防患于未然。第三部分介绍安全技术体系架构，内容包括：安全技术架构、网络和通信层安全架构、设备和主机层安全架构、应用和数据层安全架构、安全架构案例分析等。第四部分介绍数据安全与隐私保护治理，内容包括：数据安全治理、数据安全政策文件体系、隐私保护基础与增强技术、GRC治理框架、数据安全与隐私保护的统一等。

Language:Python100

coca1ne.github.io

Language:HTML1 20

coverity-security-library

Coverity Security Library (CSL) is a lightweight set of escaping routines for fixing cross-site scripting (XSS), SQL injection, and other security defects in Java web applications.

Language:Java1 20

db_security

Language:PLSQL1 20

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Language:JavaScriptNOASSERTION1 20

error-prone

Catch common Java mistakes as compile-time errors

Language:JavaApache-2.01 20

fbctf

Platform to host Capture the Flag competitions

Language:HackNOASSERTION1 20

firminator_backend

The first open source vulnerability scanner for firmwares

Language:Python1 20

godep

dependency tool for go

Language:GoBSD-3-Clause1 20

golismero

GoLismero - The Web Knife

Language:PythonGPL-2.01 20

htmlpreview.github.com

HTML Preview for GitHub Repositories

Language:JavaScript1 20

http-observatory

HTTP Observatory

Language:PythonMPL-2.01 20

javaparser

Java 1.8 Parser and Abstract Syntax Tree for Java –

Language:JavaNOASSERTION1 20

jdtPlug

Language:Java1 20

Kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

Language:PowerShellNOASSERTION1 10

kindrssserup

Language:Python1 10

openstack-baseline

Use InSpec to run through the configurations from the OpenStack Security Guide.

Language:RubyApache-2.0100

perf-map-agent

A java agent to generate method mappings to use with the linux `perf` tool

Language:CGPL-2.01 20

QConShanghai2016

QCon上海2016幻灯片

1 20

Red-Teaming-Toolkit

A collection of open source and commercial tools that aid in red team operations.

GPL-3.01 10

SDLib

A Python library used to collect shilling detection methods and generate simulated attackers. (for academic use)

Language:PythonGPL-3.01 20

sockjs-client

WebSocket emulation - Javascript client

Language:JavaScriptMIT1 20

Some-PoC-oR-ExP

各种漏洞poc、Exp的收集或编写