ir-st Goto Github PK
Name: A2ur3
Type: User
Blog: https://github.com/ir-st
Name: A2ur3
Type: User
Blog: https://github.com/ir-st
代码审计知识点整理-Java
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
This is a daemon process which make a programe runing all time.
Active C2 IoCs
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms漏洞利用工具,爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。
一款可以检测WEB蜜罐并阻断请求的Chrome插件
Chrome 蜜罐检测插件
安全隐私卫士(AppScan)一款免费的企业级自动化App隐私合规检测工具。
Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.
Interesting apt report collection and some special ioc express
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
ARL官方仓库备份项目:ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
auto decrypt the request ciphertext and auto bypass the signature of the API. 针对数据包加密、签名保护的安全测试场景,借助burp插件自动解密数据包密文,自动绕过接口的签名保护,最后借助密文数据天然过waf的优势结合Xray等漏扫工具完成半自动的安全测试
Burp插件,根据自定义来达到对数据包的处理(适用于加解密、爆破等),类似mitmproxy,不同点在于经过了burp中转,在自动加解密的基础上,不影响APP、网站加解密正常逻辑等。
利用图形化识别技术快速关闭目标机器上的杀毒软件
AWD线下攻防常用自动化脚本
A curated list of tools for incident response
恶意软件分析
:scream: A curated list of amazingly awesome OSINT
收录了一些可以快速创建出精美readme.md的工具集合
🔥 Everything awesome about web-application firewalls (WAF).
This repository have some BadUSB attack examples for Arduino IDE compatible devices
白鹿社工字典生成器,灵活与易用兼顾。
“冰蝎”动态二进制加密网站管理客户端
python与burpsuite通信插件,应对反重返签名,加密解密场景下的渗透测试。
一款基于BurpSuite的被动式shiro检测插件
远控免杀系列文章及配套工具,搜集汇总了互联网上的几十种免杀工具和免杀方法,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.