noname's repositories
arthas
Alibaba Java Diagnostic Tool Arthas/Alibaba Java诊断利器Arthas
btrace
BTrace - a safe, dynamic tracing tool for the Java platform
CodeQL
《深入理解CodeQL》Finding vulnerabilities with CodeQL.
dd-trace-java
Datadog APM client for Java
dd-trace-py
Datadog Python APM Client
DongTai-1
DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.
DongTai-agent-java
Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
DongTai-web
dongtai web is the front-end project of "huoxian DongTaiIast" and is responsible for page display
Elkeid
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.
go-dnscollector
Ingesting, pipelining, and enhancing your DNS logs with usage indicators, security analysis, and additional metadata.
gosec
Go security checker
graylog2-server
Free and open source log management
grule-rule-engine
Rule engine implementation in Golang
HackJava
《深入理解Java代码审计》
ice
Rule engine/process engine, committed to solving flexible and complex hard-coded problems, for complex/flexibly changing business, provide a new abstract orchestration solution that is lightweight, high-performance and provides visual operation pages. Java规则引擎-ice，针对复杂/灵活变动业务，提供一个新的抽象编排解决方案，轻量级，高性能并提供可视化操作页面
jrasp-agent
专注于JVM的运行时防御系统RASP
jrasp-web
the management-side project of JRASP
jxwaf
JXWAF(锦衣盾)是一款开源web应用防火墙
loki
Like Prometheus, but for logs.
Mshell
Memshell-攻防内存马研究
openrasp
🔥Open source RASP solution
osquery-attck
Mapping the MITRE ATT&CK Matrix with Osquery
osquery-defense-kit
Production-ready detection & response queries for osquery
otel-profiling-agent
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, PHP, Ruby, Perl, ...)
SafeLine
一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术，作为反向代理接入，保护你的网站不受黑客攻击。
Safety-Project-Collection
收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。
Study-Floder
相当不错的图书，例如《数学之美》、《浪潮之巅》、《TCP/IP卷一/卷二/卷三》等；一些大的上传受限制的文件《图解TCP_IP_第5版》、《深入理解Java虚拟机JVM》、《effective java》等在README