NewBee119

threat-intelligence

收集的一些国外能提供提供威胁情报的公司，涵盖网络安全、工控安全、终端安全、移动安全等领域

Ti_Collector

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

telnet-scanner

telnet服务密码撞库

ssh-scanner

ssh password guessing，ssh登录密码破解

ctf_ics_traffic

工控CTF比赛工具，各种网络数据包处理脚本

ControlXiaomiDevices

This repository is a set of python scripts to control xiaomi IoT device。这个项目是一组Python脚本程序，用来控制小米智能家居设备

Deceptive-document

通过在U盘中伪装正常文件，欺骗用户点击，传播木马的一个demo程序~just for fun~

check_ip

check_IP is to judge whether a IP is malicious based on open threat intelligence，基于开源威胁情报AlienVault，排查IP地址及域名的恶意性

IP-location

batch query IP location information，批量查询IP地理位置信息，解析pcap包中IP地址的地理信息

StreamDump

tcp stream dump with BPF filter rules | bidirection | domain

firmware_analysis

物联网设备分析环境搭建与工具使用，包括脚本换阿里源、binwalk的完整安装、firmwalker和rips的使用

string_match

实现并对比了各类字符串匹配算法，包括Sunday、KMP、Boyer-Moore、horspool

IoT_bot

A sample IoT bot origin from Mirai

ICS-packets-Analyzer

It can analyse the packets of ICS

Attack-Technique-Dataset

A dataset containing APT group related articles and MITRE ATT&CK technique descriptions

ctf_vxworks

CTF比赛，VxWorks弱hash算法，密码碰撞解析

optimize_model

本项目主要功能是自动完成特征选择与参数调试，用于优化随机森林模型，本项目的特征文件来自于文献“Two-layer detection framework with a high accuracy and efficiency for a malware family over the TLS protocol”中的部分研究。

net-kernel

netfilter hook kernel module for IoT devices

https_packets_decrypt

用私钥手动解HTTPS数据包的实验素材

malware_traffic_crawler

To download malware traffic from two sources.

ICS-Security-Tools

Tools, tips, tricks, and more for exploring ICS Security.

PaperFeatures

Features of distance-based method.

Mechanize-Email

使用mechanize对谷歌做模拟点击以及模拟点击失败之后的email通知

Kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

NeoPI

prefix-tree

the implementation of prefix tree and compare prefix tree with hard match

README

README文件语法解读，即Github Flavored Markdown语法介绍

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.