lordlight's repositories
awesome-cloud-native-security
awesome resources about cloud native security 🐿
7days-golang
7 days golang programs from scratch (web framework Gee, distributed cache GeeCache, object relational mapping ORM framework GeeORM, rpc framework GeeRPC etc) 7天用Go动手写/从零实现系列
Aggressor
Ladon for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp
Amass
In-depth Attack Surface Mapping and Asset Discovery
archerysec
Centralize Vulnerability Assessment and Management for DevSecOps Team
clair
Vulnerability Static Analysis for Containers
CyberBattleSim
An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.
dataease
人人可用的开源数据可视化分析工具。
Dragonfly
Dragonfly is an intelligent P2P based image and file distribution system.
Glass
Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa Api快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。
Hack-Tools
The all-in-one Red Team extension for Web Pentester 🛠
janusec
Janusec Application Gateway, Provides Fast and Secure Application Delivery. JANUSEC应用网关，提供快速、安全的应用交付。
kubernetes-hardening-guidance
《Kubernetes 加固手册》（美国国家安全局出品）- https://jimmysong.io/kubernetes-hardening-guidance
linglong
一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示
macos_security
macOS Security Compliance Project
metarget
framework providing automatic constructions of vulnerable infrastructures
Middleware-Vulnerability-detection
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15
NessusToReport
nessus扫描报告自动化生成工具
nsfocus_all
RSAS绿盟科技漏洞扫描,报告整理
openscap
NIST Certified SCAP 1.2 toolkit
PaddleOCR
Awesome multilingual OCR toolkits based on PaddlePaddle （practical ultra lightweight OCR system, provide data annotation and synthesis tools, support training and deployment among server, mobile, embedded and IoT devices）
reapoc
OpenSource Poc && Vulnerable-Target Storage Box.
riskscanner
RiskScanner 是开源的多云安全合规扫描平台，通过 Cloud Custodian 的 YAML DSL 定义扫描规则，实现对主流公(私)有云资源的安全合规扫描及使用优化建议。
securityonion
Security Onion 2 - Linux distro for threat hunting, enterprise security monitoring, and log management
sliver
Adversary Emulation Framework
social-analyzer
API and Web App for analyzing & finding a person profile across 300+ social media websites (Detections are updated regularly)
stenographer
谷歌包捕获解决方案Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
xepor
Xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & Flask