安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functi…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks. 

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…

《深入理解SAST静态应用安全测试》Static Application Security Testing.

Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterprise features.

A list of popular github projects related to deep learning

This is a webshell open source project

Ultra-lightweight JavaScript engine for the Internet of Things.

Continuous Inspection

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

🐶 A curated list of Web Security materials and resources.

Python client for Apache Kafka

快速搭建各种漏洞环境(Various vulnerability environment)

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Repository of yara rules

The pattern matching swiss knife

Repository of yara rules