chaigon Goto Github PK

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

openrasp

Open source RASP solution

oscp-survival-guide_

Not mine just forked from a DMCA old repo from fritz user

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

passionfruit

[WIP] Crappy iOS app analyzer

pcc

PHP Secure Configuration Checker

pentest_study

phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

phpsploit

Stealth post-exploitation framework

phptrace

A tracing and troubleshooting tool for PHP scripts.

pipe

:saxophone: 小而美的博客平台。A small and beautiful blogging platform.

poc-exp

poccollect

a plenty of poc based on python

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

red_team_tool_countermeasures

risk-management-note

风险控制笔记，适用于互联网企业

rule-engine

基于Drools的规则引擎，可用来作为风控系统，额度控制系统的基础组件

shield

基于Strom的日志实时流量分析主动防御(CCFirewall)系统

snail-c

sdns-c 是游戏蜗牛SDns的c语言SDK。 SDns就是游戏蜗牛研发的HttpDNS服务器。使用HTTP协议向SDns服务器的80端口进行请求， 代替传统的DNS协议向DNS服务器的53端口进行请求， 绕开了运营商的LocalDNS，从而避免了使用运营商LocalDNS造成的劫持和跨网问题。

sqliscanner

Automatic SQL injection with Charles and sqlmapapi

suricata

Mirror of the official OISF Suricata git repository

tiktok-gorgon-bridge

Express server with a Frida bridge to sign TikTok API requests

triaquae

To be the best IT management software

w5

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

wazuh-ruleset

Wazuh - Ruleset

webrtcxss

利用XSS入侵内网(Use XSS automation Invade intranet)

webshell-scanner

xss-filter

XSS (Cross-Site Script) Filter for Node.js & the browser, provides friendly, reliable XSS filter API for you.

zhisousou

企业风险监控