OpenThreatModel

A unique technique to execute binaries from a password protected zip

Scanning APK file for URIs, endpoints & secrets.

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

网络协议2天集训

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover su…

FedRAMP Tailored.

New implementation of the live editor

ucore os lab guide

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

OS kernel labs based on Rust Lang & RISC-V 64

CTF-渗透测试~工具合集

Security Knowledge Framework (SKF) Python Flask / Angular project

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

source code and instructions for oauth2 labs

一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

A curated collection of Markdown resources: apps, dialects, parsers, people, …

极客时间课程《Python核心技术与实战》课程练习实践。

Small and highly portable detection tests based on MITRE's ATT&CK.

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

Various public documents, whitepapers and articles about APT campaigns

The pattern matching swiss knife

Generic Signature Format for SIEM Systems

Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error

一些有趣的python爬虫例子,对新手比较友好,主要爬取淘宝、天猫、微信、豆瓣、QQ等网站。(Some interesting examples of python crawlers that are friendly to beginners. )

The security tool(project) Set from github。github安全项目工具集合

Web Pentesting Fuzz 字典,一个就够了。

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

An informational repo about hunting for adversaries in your IT environment.