Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

360zhinao

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

WatchAD2.0是一款针对域威胁的日志分析与监控系统

10分钟搭建自己可免费商用的ChatGPT环境，搭建简单，包含用户，订单，任务，付费等功能

🤱🏻 Turn any webpage into a desktop app with Rust. 🤱🏻 很简单的用 Rust 打包网页生成很小的桌面 App

A swiss army knife for pentesting networks

The swiss army knife of LSASS dumping

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

ChatGPT 中文调教指南。各种场景使用指南。学习怎么让它听你的话。

🐙 Guides, papers, lecture, notebooks and resources for prompt engineering

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (D…

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Virtual whiteboard for sketching hand-drawn like diagrams

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading prox…

A python tool used to discover endpoints (and potential parameters) for a given target

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.

A fast, simple, recursive content discovery tool written in Rust.

A list of public penetration test reports published by several consulting firms and academic security groups.

A CAT called tabby ( Code Analysis Tool )

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

Top disclosed reports from HackerOne

Stop half-done API specifications! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by validating your API specifications.

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

📚 A collection of useful resources for building RESTful HTTP+JSON APIs.

面向网络安全从业者的知识文库🍃