mirror of
https://github.com/euphrat1ca/Security-List.git
synced 2026-07-03 21:09:19 +08:00
219
219
This commit is contained in:
euphrat1ca
parent
17d46c3d70
commit
184555b68a
62
README.md
62
README.md
@ -28,18 +28,20 @@
|
||||
- https://www.alibabacloud.com/blog //阿里安全建设
|
||||
- https://security.tencent.com/index.php/blog //腾讯安全建设
|
||||
- https://github.com/baidu-security //百度安全建设
|
||||
- https://blogs.cisco.com/tag/ios-security //思科网络设备操作维护系统IOS（互联网操作系统Internetwork Operating System）
|
||||
- https://ai.google/research/pubs/?area=SecurityPrivacyandAbusePrevention //谷歌安全建设
|
||||
- https://aws.amazon.com/cn/blogs/security/ //亚马逊安全建设
|
||||
- https://code.fb.com/category/security/ //Facebook安全建设
|
||||
- http://www.freebuf.com/articles/ics-articles/178822.html //浅析煤炭企业如何进行工控安全建设
|
||||
- https://www.sec-un.org/金融业企业安全建设之路/ //金融业企业安全建设之路。niejun
|
||||
- http://paper.tuisec.win/detail/34ab12018f71e71 //个人总结的漏洞管理流程分享
|
||||
- https://www.secrss.com/articles/4088 //安全资产管理中容易被忽视的几点。niejun
|
||||
- https://blogs.cisco.com/tag/ios-security //思科网络设备操作维护系统IOS（互联网操作系统Internetwork Operating System）
|
||||
### 安全实验室中心建设
|
||||
- https://www.freebuf.com/articles/es/211571.html //安全实验室的发展及展望
|
||||
- 公众号：开篇|猪八戒安全建设漫谈 安全体系建设分享01期|目标、团队、考核 //
|
||||
### 安全运营中心(SOC)建设
|
||||
- https://www.secrss.com/articles/8051 //谈一谈如何建设体系化的安全运营中心(SOC)
|
||||
- http://www.freebuf.com/articles/network/169632.html //开源软件创建SOC的一份清单
|
||||
- http://paper.tuisec.win/detail/34ab12018f71e71 //个人总结的漏洞管理流程分享
|
||||
- https://www.secrss.com/articles/4088 //安全资产管理中容易被忽视的几点。niejun
|
||||
### 安全风控建设
|
||||
- https://github.com/threathunterX/nebula //LUA/PERL.威胁猎人开源"星云"业务风控系统
|
||||
- https://github.com/momosecurity/aswan //PY.陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。
|
||||
@ -167,58 +169,8 @@
|
||||
### 勒索病毒
|
||||
- https://github.com/jiansiting/Decryption-Tools //勒索病毒解决方案汇总
|
||||
- https://www.nomoreransom.org //在线勒索病毒解决方案
|
||||
## 数据情报分析
|
||||
- http://pandas.pydata.org //数据分析
|
||||
- https://github.com/r0f1/datascience //大数据分析功能库推荐
|
||||
- https://github.com/Xyntax/slides/ //安全数据分析/DNS恶意流量分析/威胁防御
|
||||
- https://github.com/mannirulz/BotDAD //PY2.使用DNS流量分析进行基于异常的僵尸网络检测的工具。数据集：data.mendeley.com/datasets/zh3wnddzxy/1 10 Days DNS Network Traffic from April-May
|
||||
- https://github.com/lion-gu/ioc-explorer //PY.从多数据源进行关联指标（IOC）自动探索
|
||||
### 地理定位分布ip库
|
||||
- https://dev.maxmind.com/geoip/geoip2/geolite2/ //geoip2全球IPV4
|
||||
- https://www.ipip.net //IPV4.有偿
|
||||
- https://www.ipplus360.com //IPV4/IPV6地址库。有偿
|
||||
- https://icsmap.shodan.io/ //shodan关于ics协议分布示意图。ics-radar.shodan.io
|
||||
## 开源情报资料
|
||||
- https://github.com/BuzzFeedNews //网络数据集集合
|
||||
- https://www.start.umd.edu/gtd/ //全球恐怖主义动向数据库官网
|
||||
- http://dingba.top/qqzk //全球智库
|
||||
- https://data.mendeley.com/ //门德利数据集
|
||||
- http://snap.stanford.edu //斯坦福公开数据集。人口/社交/等
|
||||
- http://dingba.top/ //丁爸情报分析师。文章/资源汇总
|
||||
- https://osintcurio.us //荷兰开源情报分析师博客
|
||||
- https://www.i-intelligence.eu/wp-content/uploads/2018/06/OSINT_Handbook_June-2018_Final.pdf/ //情报收集组织。开源情报资源与工具手册2018版
|
||||
- https://fas.org/irp/doddir/army/fmi2-22-9.pdf/ //开源情报的特征、开源情报组织、开源情报注意事项、开源情报的运作的计划和准备、开源情报类别、开源情报收集和处理等内容。
|
||||
- https://fas.org/irp/doddir/army/atp2-22-9.pdf/ //美国陆军开源情报2012版
|
||||
- https://osintframework.com/ //开源情报搜索框架超链接集合
|
||||
- https://docs.google.com/document/d/1BfLPJpRtyq4RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit#/ //Bellingcat的在线调查工具包
|
||||
- https://start.me/p/ZME8nR/osint //开源情报聚合
|
||||
### 多维度情报源
|
||||
- https://osint.link //Open Source Intelligence (OSINT) Tools & Resources。关键词/搜索引擎/元数据/ftp/文件/图片/视频/Iot/新闻/商业/pastebin
|
||||
- https://raidforums.com/Announcement-Database-Index-CLICK-ME //密码泄露，资源互换。W:cdn.databases.today;W:www.databases.today;hashes.org/leaks.php;W:weleakinfo.com;W:site3.sjk.space;
|
||||
- https://opendata.rapid7.com //Rapid7 OpenData。包含dns/ssl/http/udp/tcp各种数据包记录。greatjob。
|
||||
- http://s3.amazonaws.com/alexa-static/top-1m.csv.zip //Alexa网站流量综合排名一万
|
||||
- https://github.com/Te-k/harpoon //PY.基于osint的威胁情报命令行工具
|
||||
- https://github.com/needmorecowbell/sniff-paste //针对 Pastebin 的开源情报收集工具
|
||||
- https://trumail.io/ //验证对方邮箱是否为垃圾邮箱，每个月可以免费验证1000次
|
||||
- https://github.com/ChrisJohnRiley/Scythe //验证账号是否为常用账号
|
||||
- https://github.com/fireeye/GeoLogonalyzer //远程身份验证地理位置分析工具，用于区分合法登录和恶意登录。
|
||||
### 威胁情报源
|
||||
- https://www.fireeye.com/current-threats.html //fireeye火眼威胁情报资源
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_intelligenceThreat.md/ //公开收集威胁情报库.mywiki
|
||||
- https://www.threatcrowd.org/ //威胁情报分析平台。Web:ti.qianxin.com;Web:feed.watcherlab.com;Web:x.threatbook.cn。
|
||||
- https://github.com/ReAbout/datacon //DataCon-方向三-攻击源与攻击者分析-writeup
|
||||
- https://github.com/OpenCTI-Platform/opencti //JS.网络威胁情报平台
|
||||
- https://github.com/t4d/StalkPhish //PY.钓鱼网站情报多源收集，包含urlscan.io;urlquery.net;phishtank.com;openphish.com。
|
||||
#### APT威胁情报
|
||||
- https://unit42.paloaltonetworks.com/ //平底锅情报IOC (Indicators of compromise)。G:pan-unit42/iocs;。
|
||||
- https://github.com/blackorbird/APT_REPORT //apt组织报告与公开文件
|
||||
- https://github.com/Yeti-791/APT-Guide //apt组织分析文档
|
||||
- https://github.com/kbandla/APTnotes //各种公开的文件和相关的APT笔记，还有软件样本
|
||||
- https://git.laucyun.com/security/APT34 //APT34/OILRIG 资源文档文件泄露
|
||||
- https://ht.transparencytoolkit.org //Hacking Team 400G泄露
|
||||
- https://pan-unit42.github.io/playbook_viewer/ //针对apt组织的威胁情报汇总
|
||||
- https://twthu.co/ //apt组织威胁情报站
|
||||
- https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections //2006年以来组织团队情报收集
|
||||
# 开源情报数据源分析
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_osint.md/ //开源情报数据源分析.mywiki
|
||||
## 攻防技术资源
|
||||
- https://attack.mitre.org //mitre科技机构对攻击技术的总结wiki，攻击矩阵模型。
|
||||
- https://github.com/infosecn1nja/awesome-mitre-attack //Mitre ATT&CK™框架资源收集。Web:huntingday.github.io;G:lengjibo/ATT-CK-CN //att&ck实操实验记录;W:vulhub.org.cn/attack //att&ck汉化;
|
||||
|
||||
55
wiki_osint.md
Normal file
55
wiki_osint.md
Normal file
@ -0,0 +1,55 @@
|
||||
# 开源情报数据源分析
|
||||
## 数据情报分析
|
||||
- http://pandas.pydata.org //数据分析
|
||||
- https://github.com/r0f1/datascience //大数据分析功能库推荐
|
||||
- https://github.com/Xyntax/slides/ //安全数据分析/DNS恶意流量分析/威胁防御
|
||||
- https://github.com/mannirulz/BotDAD //PY2.使用DNS流量分析进行基于异常的僵尸网络检测的工具。数据集：data.mendeley.com/datasets/zh3wnddzxy/1 10 Days DNS Network Traffic from April-May
|
||||
- https://github.com/lion-gu/ioc-explorer //PY.从多数据源进行关联指标（IOC）自动探索
|
||||
### 地理定位分布ip库
|
||||
- https://dev.maxmind.com/geoip/geoip2/geolite2/ //geoip2全球IPV4
|
||||
- https://www.ipip.net //IPV4.有偿
|
||||
- https://www.ipplus360.com //IPV4/IPV6地址库。有偿
|
||||
- https://icsmap.shodan.io/ //shodan关于ics协议分布示意图。ics-radar.shodan.io
|
||||
## 开源情报资料
|
||||
- https://github.com/BuzzFeedNews //网络数据集集合
|
||||
- https://www.start.umd.edu/gtd/ //全球恐怖主义动向数据库官网
|
||||
- http://dingba.top/qqzk //全球智库
|
||||
- https://data.mendeley.com/ //门德利数据集
|
||||
- http://snap.stanford.edu //斯坦福公开数据集。人口/社交/等
|
||||
- https://www.tianyancha.com/ //中国境内公司情报。企查查
|
||||
- https://opencorporates.com/ //国际天眼查
|
||||
- http://dingba.top/ //丁爸情报分析师。文章/资源汇总
|
||||
- https://osintcurio.us //荷兰开源情报分析师博客
|
||||
- https://www.i-intelligence.eu/wp-content/uploads/2018/06/OSINT_Handbook_June-2018_Final.pdf/ //情报收集组织。开源情报资源与工具手册2018版
|
||||
- https://fas.org/irp/doddir/army/fmi2-22-9.pdf/ //开源情报的特征、开源情报组织、开源情报注意事项、开源情报的运作的计划和准备、开源情报类别、开源情报收集和处理等内容。
|
||||
- https://fas.org/irp/doddir/army/atp2-22-9.pdf/ //美国陆军开源情报2012版
|
||||
- https://osintframework.com/ //开源情报搜索框架超链接集合
|
||||
- https://docs.google.com/document/d/1BfLPJpRtyq4RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit#/ //Bellingcat的在线调查工具包
|
||||
- https://start.me/p/ZME8nR/osint //开源情报聚合
|
||||
### 多维度情报源
|
||||
- https://osint.link //Open Source Intelligence (OSINT) Tools & Resources。关键词/搜索引擎/元数据/ftp/文件/图片/视频/Iot/新闻/商业/pastebin
|
||||
- https://raidforums.com/Announcement-Database-Index-CLICK-ME //密码泄露，资源互换。W:cdn.databases.today;W:www.databases.today;hashes.org/leaks.php;W:weleakinfo.com;W:site3.sjk.space;
|
||||
- https://opendata.rapid7.com //Rapid7 OpenData。包含dns/ssl/http/udp/tcp各种数据包记录。greatjob。
|
||||
- http://s3.amazonaws.com/alexa-static/top-1m.csv.zip //Alexa网站流量综合排名一万
|
||||
- https://github.com/Te-k/harpoon //PY.基于osint的威胁情报命令行工具
|
||||
- https://github.com/needmorecowbell/sniff-paste //针对 Pastebin 的开源情报收集工具
|
||||
- https://trumail.io/ //验证对方邮箱是否为垃圾邮箱，每个月可以免费验证1000次
|
||||
- https://github.com/ChrisJohnRiley/Scythe //验证账号是否为常用账号
|
||||
- https://github.com/fireeye/GeoLogonalyzer //远程身份验证地理位置分析工具，用于区分合法登录和恶意登录。
|
||||
### 威胁情报源
|
||||
- https://www.fireeye.com/current-threats.html //fireeye火眼威胁情报资源
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_intelligenceThreat.md/ //公开收集威胁情报库.mywiki
|
||||
- https://www.threatcrowd.org/ //微步威胁情报分析平台。Web:ti.qianxin.com;Web:feed.watcherlab.com;Web:x.threatbook.cn。
|
||||
- https://github.com/ReAbout/datacon //DataCon-方向三-攻击源与攻击者分析-writeup
|
||||
- https://github.com/OpenCTI-Platform/opencti //JS.网络威胁情报平台
|
||||
- https://github.com/t4d/StalkPhish //PY.钓鱼网站情报多源收集，包含urlscan.io;urlquery.net;phishtank.com;openphish.com。
|
||||
#### APT威胁情报
|
||||
- https://unit42.paloaltonetworks.com/ //平底锅情报IOC (Indicators of compromise)。G:pan-unit42/iocs;。
|
||||
- https://github.com/blackorbird/APT_REPORT //apt组织报告与公开文件
|
||||
- https://github.com/Yeti-791/APT-Guide //apt组织分析文档
|
||||
- https://github.com/kbandla/APTnotes //各种公开的文件和相关的APT笔记，还有软件样本
|
||||
- https://git.laucyun.com/security/APT34 //APT34/OILRIG 资源文档文件泄露
|
||||
- https://ht.transparencytoolkit.org //Hacking Team 400G泄露
|
||||
- https://pan-unit42.github.io/playbook_viewer/ //针对apt组织的威胁情报汇总
|
||||
- https://twthu.co/ //apt组织威胁情报站
|
||||
- https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections //2006年以来组织团队情报收集
|
||||
10
wiki_vul.md
10
wiki_vul.md
@ -63,11 +63,13 @@
|
||||
- https://slides.com/securitymb/prototype-pollution-in-kibana#/ //kibana <6.6.0 未授权远程代码命令执行。Kibana CVE-2019-7609 RCE Exploit
|
||||
- https://github.com/milo2012/CVE-2018-13379 //PY.FortiOS飞塔防火墙/VPN Pre-auth任意文件读取
|
||||
- https://nosec.org/home/detail/2862.html //intro.如何攻击Fortigate SSL VPN
|
||||
### 数据库
|
||||
### 数据库漏洞
|
||||
- https://github.com/oliver006/redis_exporter //GO.redis未授权访问
|
||||
- https://github.com/t0kx/exploit-CVE-2015-1427 //BASH.Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container远程命令执行
|
||||
## 中间件漏洞
|
||||
### Java框架相关漏洞
|
||||
### Python大框架漏洞
|
||||
- https://github.com/ryu22e/django_cve_2019_19844_poc/ //py.任意密码重置
|
||||
### Java框架漏洞
|
||||
- https://github.com/x41sec/slides/blob/master/2019-bsides-stuttgart/YourStackTracesAreLeakingCVEs.pdf //Java服务异常信息查询敏感信息和漏洞信息列表
|
||||
- https://github.com/NickstaDB/BaRMIe //JAVA.枚举测试Java RMI（远程调用服务）安全
|
||||
- https://github.com/joaomatosf/jexboss //PY.JBoss和其他java序列化漏洞验证
|
||||
@ -75,6 +77,8 @@
|
||||
- https://github.com/quentinhardy/jndiat //JAVA.Java类名/目录接口/数据库审计检测
|
||||
- https://github.com/Coalfire-Research/java-deserialization-exploits //java反序列化漏洞收集。ciscoprime/jboss/jenkins/opennms/weblogic/websphere/ysoserial
|
||||
- https://github.com/GoSecure/break-fast-serial //借助DNS解析来检测Java反序列化漏洞工具
|
||||
- https://github.com/Lucifer1993/struts-scan //PY.批量检测Struts命令执行漏洞,005-057。CVE-2018-11776
|
||||
- https://github.com/shack2/Struts2VulsTools //C#.Struts2漏洞检查工具2018版.界面。
|
||||
#### apache相关漏洞
|
||||
- https://github.com/artsploit/solr-injection //Apache Solr Injection注入研究
|
||||
- https://github.com/mpgn/CVE-2019-0192/ //Apache Solr远程命令执行漏洞。apache solr dataimporthandler RCE
|
||||
@ -83,8 +87,6 @@
|
||||
- https://github.com/s1kr10s/Apache-Struts-v3 //Apache-Struts漏洞利用工具
|
||||
- https://github.com/euphrat1ca/CVE-2019-0232 //Apache Tomcat Remote Code Execution on Windows - 需要开启CGI-BIN
|
||||
- https://github.com/magicming200/tomcat-weak-password-scanner //py.tomcat后台弱口令扫描器，命令行版+图形界面版。
|
||||
- https://github.com/Lucifer1993/struts-scan //PY.批量检测Struts命令执行漏洞,005-057。CVE-2018-11776
|
||||
- https://github.com/shack2/Struts2VulsTools //C#.Struts2漏洞检查工具2018版.界面。
|
||||
#### Weblogic相关漏洞
|
||||
- https://github.com/rabbitmask/WeblogicScan //py3.Weblogic一键漏洞检测工具，V1.3，以支持2019
|
||||
- https://github.com/dr0op/WeblogicScan //PY3.weblogic系列漏洞扫描。最新支持CVE-2019-2618（DeploymentService接口任意文件上传），CVE-2019-2729（XML反序列化rce）检测
|
||||
|
||||
Loading…
Reference in New Issue
Block a user