gitWK86

Specification

信息安全行业相关标准规范

awesome-java-security-checklist

awesome-java-security-checklist(关于Java安全方面,Java基础/审计/修复/设计/规范)

docker-security

docker 安全基线规范

Learn-security-from-0

从0开始学安全，注重实战+技巧的运用，分享各种安全攻防干货，包括但不限于：Web安全、代码审计 、内网渗透、企业安全等。

Emergency-Response-Notes

应急响应实战笔记，一个安全工程师的自我修养。

jxwaf

JXWAF是一款开源web应用防火墙

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

secure-mobile-development

A Collection of Secure Mobile Development Best Practices

Patchs

strongR-frida

cells-android10

Android 10 container system

Dev

pysonar2

PySonar2: a semantic indexer for Python with interprocedual type inference

Static-Program-Analysis-Book

Getting started with static program analysis. 静态程序分析入门教程。

Tai-e-assignments

Tai-e assignments for static program analysis

kernel-analyzer

VulFi

IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.

android-knowledge-system

Android应用开发最强原创知识体系

dpt-shell

An android Dex protects shell implementation

package-analysis

Open Source Package Analysis

oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

CodeqlLearn

记录学习codeql的过程

PrivacyMonitorAndroid

Android 隐私合规检测方案，基于ASM编译期插桩，将隐私api调用的堆栈信息保存到本地Excel文件中

Regulations-GM-Standards

数据安全/隐私合规相关的法律法规和标准

PrivacySentry

Android隐私合规整改检测工具，注解+Asm修改字节码的检测方案

BinAbsInspector-binaries

BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries

BlackBox

BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the application on devices. BlackBox control all virtual applications, so you can do anything you want by using BlackBox.

Safety-Project-Collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

ManifestEditor

This is a tool used to modify Android Manifest binary file.