x0james Goto Github PK

janusec

Janusec Application Gateway, a Golang based application security solution which provides WAF (Web Application Firewall), CC attack defense, unified web administration portal, private key protection, web routing and scalable load balancing.

jwt-cracker

Simple HS256 JWT token brute force cracker

katoolin

Automatically install all Kali linux tools

katoolin4china

Kali tools installer

koadic

Koadic C3 COM Command & Control - JScript RAT

lazagne

Credentials recovery project

luyten

An Open Source Java Decompiler Gui for Procyon (JAVA反编译)

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.(linux安全检测工具)

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

mutillidae

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiast. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software.

nosqlmap

Automated Mongo database and NoSQL web application exploitation tool

openrasp

🔥Open source RASP solution，Runtime Application Self-protection，运行时应用自我保护。

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

ossim

ossim-1

** CLONE ME FIRST! ** Core OSSIM (Open Source Software Image Map) package including C++ code for OSSIM library, command-line applications, tests, and build system

reko

Reko is a binary decompiler.

rhizobia_j

JAVA安全SDK及编码规范

search-guard

Search Guard is an Open Source Elasticsearch plugin that offers encryption, authentication, and authorisation.

sentinl

Siren Platform + Kibana Alert & Report App for Elasticsearch

shadowsocks-android

A shadowsocks client for Android

ssh_scan

A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

thehive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

threat-intelligence

收集的一些国外能提供提供威胁情报的公司，涵盖网络安全、工控安全、终端安全、移动安全等领域

threat-intelligence-analyst

威胁情报，恶意样本分析，开源Malware代码收集

vieux

Vieux - A tool for 32/64 Bit iOS downgrades using OTA Blobs

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

wappalyzer

Cross-platform utility that uncovers the technologies used on websites.

web-log-parser

web日志分析工具

wechatspider

基于python+appium的android微信自动添加好友及爬取其朋友圈的爬虫