mirror of
https://github.com/euphrat1ca/Security-List.git
synced 2026-06-30 21:09:51 +08:00
add
add sth
This commit is contained in:
euphrat1ca
parent
562ce1ff76
commit
541b58db7d
@ -161,7 +161,7 @@
|
||||
- https://www.secrss.com/articles/10986 //一次攻防实战演习复盘总结。奇安信
|
||||
- https://github.com/Bypass007/Emergency-Response-Notes //应急响应实战笔记。应急响应/日志分析/僵木蠕分析。2k。G:theLSA/emergency-response-checklist 应急响应指南;-
|
||||
- https://github.com/tide-emergency/yingji //Py3。查看主机状态/启动项/历史命令/用户特权/文件修改/异常IP等
|
||||
- https://github.com/trimstray/iptables-essentials //IP table常见防火墙规则与命令。P:Firewall App Blocker 1.7 Windows防火墙快捷操作工具;P:Linux下防火墙 firewall-cmd;
|
||||
- https://github.com/trimstray/iptables-essentials //IP table常见防火墙规则与命令。P:Firewall App Blocker 1.7 Windows防火墙快捷操作工具;P:Linux下防火墙 firewall-cmd;--
|
||||
- https://github.com/ppabc/cc_iptables //收集处理DDOS、CC攻击各类脚本，包括NGINX日志中的CC攻击IP处理。
|
||||
### 日志分析可视化
|
||||
- https://github.com/grafana/grafana //TypeScript,Go。用于可视化大型测量数据的开源程序，提供创建、共享、浏览数据方法与众多功能插件。greatjob。29.5k。
|
||||
@ -676,6 +676,7 @@ W:ns4gov.000webhostapp.com;
|
||||
- https://github.com/securego/gosec //go.Go语言源码安全分析工具
|
||||
- https://github.com/GoSSIP-SJTU/TripleDoggy //C。c/c++/object-c源代码检测框架，支持接口调用
|
||||
- https://github.com/presidentbeef/brakeman //Ruby on Rails应用静态代码分析
|
||||
- https://www.kanxue.com/book-38-438.htm/ //第三课：Delphi代码审计--项目实战1
|
||||
### JS代码审计应用安全
|
||||
- https://github.com/RetireJS/grunt-retire //js.js扩展库漏洞扫描
|
||||
- https://github.com/Aurore54F/JaSt //使用语法检测恶意/混淆的JS文件，https://www.blackhoodie.re/assets/archive/JaSt_blackhoodie.pdf
|
||||
@ -688,10 +689,10 @@ W:ns4gov.000webhostapp.com;
|
||||
- https://github.com/chuan-yun/Molten //C。PHP应用透明链路追踪工具。G:Qihoo360/phptrace;
|
||||
- https://github.com/elcodigok/wphardening //py.WordPress插件代码审计
|
||||
### python代码审计应用安全
|
||||
- https://github.com/ga0/pyprotect //C++。给python代码加密，防止逆向
|
||||
- https://github.com/ga0/pyprotect //C++。给python代码加密，防止逆向。
|
||||
- https://github.com/pyupio/safety //Py。检查所有已安装 Python包，查找已知的安全漏洞
|
||||
- https://github.com/facebook/pyre-check/ //Py3。facebook推出的Zoncolan基本版python代码静态审计工具。号称30分钟扫描一亿行代码库，bug漏洞都能找。
|
||||
- https://github.com/shengqi158/pyvulhunter //Py。基于G:yinwang0/pysonar2的Python应用审计.NOUPDATE.
|
||||
- https://github.com/shengqi158/pyvulhunter //Py。基于pysonar2的Python应用审计。NOUPDATE。G:yinwang0/pysonar2;--
|
||||
- https://github.com/PyCQA/bandit //Py。python代码安全漏洞审计
|
||||
- https://github.com/python-security/pyt //Py。用于检测Python Web应用程序中的安全漏洞的静态分析工具
|
||||
## 压力测试DDOS/CC/拒绝服务
|
||||
|
||||
@ -194,9 +194,10 @@
|
||||
## 痕迹清理隐藏
|
||||
- https://github.com/QAX-A-Team/ptrace/ //C。 Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志
|
||||
### 进程隐藏
|
||||
- https://github.com/gianlucaborello/libprocesshider //C。利用'LD_PRELOAD'实现系统函数劫持，在linux下隐藏进程
|
||||
- https://github.com/gianlucaborello/libprocesshider //C。利用'LD_PRELOAD'实现系统函数劫持，在linux下隐藏进程。
|
||||
- https://github.com/naworkcaj/bdvl/ //C.基于LDPRELOAD方式隐藏执行程序、命令、后门、反调试取证。G:mempodippy/vlany/wiki //作者原知识库;--
|
||||
- https://www.cnblogs.com/mysgk/p/9602977.html //Intro。利用libprocesshider在 linux 下隐藏进程的一种方法。
|
||||
- https://github.com/M00nRise/ProcessHider //C++。Windows下隐藏进程
|
||||
- https://github.com/M00nRise/ProcessHider //C++。Windows下隐藏进程。
|
||||
- https://github.com/malcomvetter/UnstoppableService //C#。将自身安装为Windows服务且管理员无法停止/暂停服务的程序。
|
||||
## 提权相关
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_vul.md/ //提权相关漏洞。myWiki
|
||||
|
||||
@ -92,6 +92,7 @@
|
||||
- http://www.icsmaster.org/archives/ics/690/ //通过Siemens1200 Tsend和Trev模块实现socket代理功能
|
||||
## 工控协议
|
||||
- https://www.freebuf.com/articles/ics-articles/167079.html //深度解析工控网络流量特点
|
||||
- https://www.freebuf.com/articles/ics-articles/218674.html/ //工控安全EthernetIP协议分析。Ethernet/IP协议中间人攻击。
|
||||
### ics 西门子S7安全
|
||||
- https://www.freebuf.com/articles/ics-articles/188159.html //工控安全 | 西门子通信协议S7COMM（Part 1）
|
||||
- https://github.com/hslatman/awesome-industrial-control-system-security/blob/master/source/s7-cracker.py //s7密码爆破
|
||||
|
||||
@ -46,6 +46,37 @@
|
||||
- https://github.com/open-power-workgroup/Hospital //全国莆田系医院名单
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_MalwareSample.md/ //恶意样本数据源收集库。myWiki
|
||||
- https://github.com/gh0stkey/avList //杀软进程对应杀软名称
|
||||
## 在线检测
|
||||
- https://app.any.run/ //可视化在线恶意文件检测。包含流行恶意文件样本
|
||||
- https://habo.qq.com //在线恶意文件检测
|
||||
- http://r.virscan.org/ //在线杀毒
|
||||
### 移动app在线检测
|
||||
- https://www.appscan.io //盘古app安全移动软件在线检测
|
||||
- http://safe.ijiami.cn //爱加密app安全移动软件在线检测
|
||||
- http://appscan.360.cn //360显微镜
|
||||
- https://service.security.tencent.com/kingkong //腾讯金刚app安全移动软件在线检测
|
||||
### 在线恶意文件检测
|
||||
- https://www.virustotal.com/gui/
|
||||
- https://x.threatbook.cn/
|
||||
- https://malwr.com/
|
||||
- http://camas.comodo.com/
|
||||
- https://www.reverse.it/
|
||||
- http://threatexpert.com/submit.aspx
|
||||
- http://vicheck.ca/
|
||||
- https://virusshare.com/
|
||||
- https://malshare.com/
|
||||
- https://github.com/ytisf/theZoo
|
||||
### 动态恶意文件检测
|
||||
- cuckoo：https://github.com/cuckoosandbox/cuckoo
|
||||
- regshot：https://sourceforge.net/projects/regshot/
|
||||
- Process hackerhttps://processhacker.sourceforge.net
|
||||
- Process monitor：https://docs.microsoft.com/zh-cn/sysinternals/downloads/procmon
|
||||
- ProcDot：https://www.cert.at/downloads/software/procdot_en.html
|
||||
- windump：https://www.winpcap.org/windump/
|
||||
- Graphviz：www.graphviz.org/Download.php
|
||||
- Gapture-BAT:https://www.honeynet.org/node/315
|
||||
- fakenet:https://sourceforge.net/projects/fakenet/
|
||||
- wireshark:https://www.wireshark.org/download.html
|
||||
## MalwareSample //恶意样本数据
|
||||
以下来自于公众号：熊猫正正 安全分析与研究 （偷懒就不排版了）
|
||||
如果你身在安全公司，有客户端类的安全产品，一般从下几个渠道可以获取：
|
||||
@ -55,7 +86,7 @@
|
||||
(4)如果公司有VT帐号，可以从VT上去下载相关的样本
|
||||
(5)可以从内部的一些监控系统爬虫系统中找到新的样本或变种样本
|
||||
如果没有客户端产品，一般都是从客户反馈收集的样本进行分析处理，或者从一些开源的样本下载网站，以及与其它公司购买交换而来
|
||||
|
||||
|
||||
如果你不在安全公司工作，可以从以下几个渠道获取：
|
||||
(1)国外样本分享网站，如：
|
||||
http://contagiodump.blogspot.com
|
||||
@ -162,35 +193,4 @@ https://linux.huntingmalware.com/analysis/
|
||||
https://github.com/detuxsandbox/detux
|
||||
https://detux.org/index.php
|
||||
恶意样本下载网站
|
||||
https://github.com/InQuest/malware-samples
|
||||
## 在线检测
|
||||
- https://app.any.run/ //可视化在线恶意文件检测。包含流行恶意文件样本
|
||||
- https://habo.qq.com //在线恶意文件检测
|
||||
- http://r.virscan.org/ //在线杀毒
|
||||
### 移动app在线检测
|
||||
- https://www.appscan.io //盘古app安全移动软件在线检测
|
||||
- http://safe.ijiami.cn //爱加密app安全移动软件在线检测
|
||||
- http://appscan.360.cn //360显微镜
|
||||
- https://service.security.tencent.com/kingkong //腾讯金刚app安全移动软件在线检测
|
||||
### 在线恶意文件检测
|
||||
- https://www.virustotal.com/gui/
|
||||
- https://x.threatbook.cn/
|
||||
- https://malwr.com/
|
||||
- http://camas.comodo.com/
|
||||
- https://www.reverse.it/
|
||||
- http://threatexpert.com/submit.aspx
|
||||
- http://vicheck.ca/
|
||||
- https://virusshare.com/
|
||||
- https://malshare.com/
|
||||
- https://github.com/ytisf/theZoo
|
||||
### 动态恶意文件检测
|
||||
- cuckoo：https://github.com/cuckoosandbox/cuckoo
|
||||
- regshot：https://sourceforge.net/projects/regshot/
|
||||
- Process hackerhttps://processhacker.sourceforge.net
|
||||
- Process monitor：https://docs.microsoft.com/zh-cn/sysinternals/downloads/procmon
|
||||
- ProcDot：https://www.cert.at/downloads/software/procdot_en.html
|
||||
- windump：https://www.winpcap.org/windump/
|
||||
- Graphviz：www.graphviz.org/Download.php
|
||||
- Gapture-BAT:https://www.honeynet.org/node/315
|
||||
- fakenet:https://sourceforge.net/projects/fakenet/
|
||||
- wireshark:https://www.wireshark.org/download.html
|
||||
https://github.com/InQuest/malware-samples
|
||||
Loading…
Reference in New Issue
Block a user