SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

automated web assets enumeration & scanning

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The official mirror of the V8 Git repository

JAVA安全SDK及编码规范

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

Proof-of-concept codes created as part of security research done by Google Security Team.

SQL powered operating system instrumentation, monitoring, and analytics.

一款由 YSRC 开源的主机入侵检测系统

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Docker-Compose file for vulnerability environment

XSStrike is an advanced XSS detection and exploitation suite.

Open source RASP solution

Github Sensitive Information Leakage（Github敏感信息泄露）

HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分osquery、另一部分监控脚本来补充osquery规则的不足； 本文是第一部分osquery规则部分，实现绝大部分主机…

优质安全 list

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.