tuhaolam

OpenSCA-cli

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

CodeQL

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

springBoot-study

SpringBoot学习的相关工程并辅以博文讲解。主要包括入门的Hello World、自定义配置的获取、集成mybatis的xml和注解使用、集成jpa的使用、集成druid进行项目的监控、事物实战使用， 项目打包、使用logback日志文件管理、添加过滤器和拦截器、多数据源、Restful风格的服务、集成elasticsearch、redis、netty、集成jsp和thymeleaf、集成storm、kafka等相关技术。

HackJava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

IPinfo

整合多接口的IP查询工具。

golang-developer-roadmap

Roadmap to becoming a Go developer in 2020

gin-web

由gin + gorm + jwt + casbin组合实现的RBAC权限管理脚手架Golang版, 搭建完成即可快速、高效投入业务开发

awesome-go

A curated list of awesome Go frameworks, libraries and software

auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

auth-analyzer

Hacker_Document

收集一些以前看过对于入门和进阶很有用的攻击原理文档..

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

DataDefender

Sensitive Data Management: Data Discovery and Anonymization toolkit

Bridge

无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

RTASS

红蓝对抗量化评估系统（Red Team Assessment Scoring System）

check_jsonp_based_on_ast

基于AST的JSONP劫持漏洞自动化挖掘

DataX-Masking

DataX 3.0 平台上脱敏算法的集成与实现。

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

v8-JavaScript-Documents

《Chrome V8源码》系列技术文章，3~4天一篇，持续更新中

ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

CodeqlNote

Codeql学习笔记

fix_log4j2

Hades

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

marshalsec

safetrend-echarts

大数据威胁态势感知，图标实时展示攻击状态