invahua

CISSP

Certified Information System Security Professional 注册信息系统安全专家

PCI-DSS

Payment Card Industry Data Security Standard 3.2 __Chinese Simplified Version 支付卡行业数据安全标准简体中文版

1221

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

appuse

appuse chinese document

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

cobra

Cobra（眼镜蛇） - Static code security scanner & analyser (白盒代码安全扫描与分析系统)

CVE-2018-2628

creak_phpstorm

use nginx lua and LanYu's creak to creak phpstrom on the web server register what you want name

database

sql,nosql

elasticsearch

Open Source, Distributed, RESTful Search Engine

euleros-docker-images

The base images of EulerOS

flexidie

Source code and binaries of FlexiSpy from the Flexidie dump

GyoiThon

GyoiThon is a growing penetration test tool using Machine Learning.

iCloudBrutter

AppleID Bruteforce

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

jumpserver

开源跳板机/堡垒机:认证,授权,审计,自动化运维(Open source springboard machine / machine fortress: authentication, authorization, auditing, operation and maintenance of automation).http://www.jumpserver.org

KPTI-PoC-Collection

Meltdown/Spectre PoC src collection.

lua-resty-waf

High-performance WAF built on the OpenResty stack

Mirai-Source-Code

Leaked Mirai Source Code for Research/IoC Development Purposes

ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

openbilibili-go-common

听说这是来自 https://github.com/openbilibili/go-common/ 的 “哔哩哔哩 bilibili 网站后台工程 源码”，不过咱也不知道这是啥。

openrasp

Open source RASP solution

Pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

securitylaw

Chinese network security 2016年11月7日

syntia

Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"

tensorflow

Computation using data flow graphs for scalable machine learning

WindowsExploits

Windows exploits, mostly precompiled.

wooyunallbugs

wooyun_all_bugs