Beast code in Giters

john's repositories

Apollo-11

Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

Language:Assembly000

assimilate

Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers

Language:PythonApache-2.0010

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

000

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

Apache-2.0010

机器学习分析http代理日志识别恶意活动，一个基础教程，用了nlp的一些特种处理方式加上tf-idf进行特征选择，然后丢进随机森林直接开跑。讲了日志分析的基本套路，想入手日志分析的可以学习接触一下。基本套路就是 1. 把数据格式化成特征（tfidf就在这里用）这样机器就能处理日志了 2. 选择特征 3. 选择一个模型，一般NLP系列都是先SVM来一发调参 4. 选择合适的评价函数衡量模型好坏，并通过cross validation选择最优参数。链接： https://speakerdeck.com/davidjbianco/getting-started-with-machine-learning-for-incident-detection

Language:PythonApache-2.0020

exe2hex

Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).

Language:PythonMIT010

flexidie

Source code and binaries of FlexiSpy from the Flexidie dump

Language:Objective-C010

fwpass

常见安全设备默认密码

000

hashcat

Advanced CPU-based password recovery utility

Language:C000

HELK

The Hunting ELK

Language:CSSGPL-3.0000

ioc_writer

openioc to yara

Language:PythonApache-2.0000

ip2region

准确率99.9%的ip地址定位库，0.0x毫秒级查询，数据库文件大小只有1.5M，提供了java,php,c,python,nodejs,golang查询绑定和Binary,B树,内存三种查询算法，妈妈再也不用担心我的ip地址定位！

Language:CApache-2.0000

maltrail

Malicious traffic detection system

Language:PythonMIT020

OSTrICa

Language:JavaScript010

RATDecoders

Python Decoders for Common Remote Access Trojans

Language:PythonGPL-3.0010

reading-notes

list some notes

Language:C000

scansio-sonar-splunk

Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and security operations.

Language:PythonApache-2.0010