mirror of
https://github.com/euphrat1ca/Security-List.git
synced 2026-06-27 21:01:32 +08:00
1
This commit is contained in:
whoami
parent
892ec896bc
commit
605e322a84
@ -6,13 +6,6 @@
|
||||
- https://github.com/fkie-cad/awesome-embedded-and-iot-security //嵌入式与iot安全
|
||||
- https://www.freebuf.com/articles/terminal/203311.html //智能摄像头安全分析及案例参考
|
||||
- https://www.freebuf.com/news/153580.html //物联网安全研究之一：IoT架构介绍
|
||||
### 环境模拟仿真
|
||||
- https://www.freebuf.com/articles/ics-articles/230402.html //一种工控蜜罐识别与反识别技术研究与应用实践
|
||||
- https://github.com/sjhilt/GasPot //模拟油电燃气工控系统
|
||||
- https://github.com/djformby/GRFICS //基于Unity 3D游戏图形引擎实现的工业仿真系统模拟框架。采用MODBUS协议对3个VirtualBox VM（3D模拟，软PLC和HMI）仅在主机的虚拟网络上相互通信的PLC进行监视和控制。Goodjob。W:anquanke.com/post/id/222674;--
|
||||
- https://github.com/mushorg/conpot //针对ICS/SCADA的低交互工控蜜罐，模拟Modbus和S7comm
|
||||
- https://github.com/trombastic/PyScada/ //Py3。基于Django的SCADA操作管理系统。
|
||||
- https://github.com/RabitW/IoTSecurityNAT //IoT测试系统，方便快速接入各种设备，进行安全测试
|
||||
## 物联网利用分析
|
||||
- https://github.com/threat9/routersploit //Py3。类msf物联网漏洞利用框架。goodjob。
|
||||
- https://tools.ietf.org/html/rfc793/ //treck tcp/ip协议的rfc文档，JSOF_Ripple20_Technical_Whitepaper_June20（Ripple20:19个0 day漏洞 白皮书）。
|
||||
@ -142,10 +135,10 @@
|
||||
- https://github.com/0xICF/SCADAShutdownTool// //工业控制系统自动化和测试工具，允许安全研究人员和专家测试SCADA安全系统，枚举从属控制器，读取控制器的寄存器值并重写寄存器数据。
|
||||
### ics modbus安全
|
||||
- https://github.com/yanlinlin82/plcscan //通过TCP/102和TCP/502识别互联网上PLC设备和其他Modbus设备
|
||||
- https://github.com/ezelf/modbusKiller //py.Schneider Dos PLC Modicon via Modbus Injection。CVE-2017-6017。
|
||||
- https://github.com/0x0mar/smod/ //py2.Modbus渗透测试框架。
|
||||
- https://www.freebuf.com/articles/ics-articles/235047.html //Modbus PLC攻击分析：Smod渗透框架研究
|
||||
- https://github.com/ezelf/modbusKiller //py。Schneider Dos PLC Modicon via Modbus Injection。CVE-2017-6017。
|
||||
- https://github.com/sourceperl/mbtget/ //Perl。Modbus/TCP客户端。
|
||||
- https://github.com/0x0mar/smod/ //py2。Modbus渗透测试框架。
|
||||
- https://www.freebuf.com/articles/ics-articles/235047.html //Modbus PLC攻击分析：Smod渗透框架研究
|
||||
- https://www.freebuf.com/articles/ics-articles/235586.html/ //Modbus PLC攻击分析：Python和Mbtget读写PLC
|
||||
## 工控模拟仿真
|
||||
- https://github.com/euphrat1ca/security_w1k1/blob/master/wiki_Honeypot.md/ //工控蜜罐。myWiki
|
||||
@ -155,4 +148,11 @@
|
||||
- https://www.modbustools.com/index.html //modbus模拟软件
|
||||
- https://download.csdn.net/download/weixin_43977912/12201820 //S7工控模拟器S7serverdemo与S7clientdemo。
|
||||
- https://www.freebuf.com/articles/ics-articles/236250.html/ //西门子PLC的网络仿真搭建方法探讨。以太网32/64位多平台S7 PLC通信套件，Snap7 Client Demo客户端，SIMATIC Manager编程软件，S7-PLCSIM模拟器。
|
||||
- https://mp.weixin.qq.com/s/lKFxvA3JtDwiWqJ11TEzIQ //工控CIP/EtherNet/IP协议仿真环境搭建
|
||||
- https://mp.weixin.qq.com/s/lKFxvA3JtDwiWqJ11TEzIQ //工控CIP/EtherNet/IP协议仿真环境搭建
|
||||
### 场景模拟仿真
|
||||
- https://www.freebuf.com/articles/ics-articles/230402.html //一种工控蜜罐识别与反识别技术研究与应用实践
|
||||
- https://github.com/sjhilt/GasPot //模拟油电燃气工控系统
|
||||
- https://github.com/djformby/GRFICS //基于Unity 3D游戏图形引擎实现的工业仿真系统模拟框架。采用MODBUS协议对3个VirtualBox VM（3D模拟，软PLC和HMI）仅在主机的虚拟网络上相互通信的PLC进行监视和控制。Goodjob。W:anquanke.com/post/id/222674;P:```ase18-paper_formby.pdf```;--
|
||||
- https://github.com/mushorg/conpot //针对ICS/SCADA的低交互工控蜜罐，模拟Modbus和S7comm
|
||||
- https://github.com/trombastic/PyScada/ //Py3。基于Django的SCADA操作管理系统。
|
||||
- https://github.com/RabitW/IoTSecurityNAT //IoT测试系统，方便快速接入各种设备，进行安全测试
|
||||
@ -26,6 +26,7 @@
|
||||
- https://github.com/portswigger/http-request-smuggler //http请求走私
|
||||
- https://github.com/yandex/burp-molly-pack //XXE、SSRF漏洞利用探测。
|
||||
## Nmap/Masscan拓展插件相关工具
|
||||
- https://raw.githubusercontent.com/nmap/nmap/master/nmap-service-probes //Nmap指纹库，资产识别指针、配置文件。greatjob。
|
||||
- https://xz.aliyun.com/t/6002 //如何修改nmap， 重新编译，绕过IDS流量检测。G:/al0ne/Nmap_Bypass_IDS;--
|
||||
- https://github.com/Ullaakut/nmap //Go。Nmap调用库go
|
||||
- https://github.com/savon-noir/python-libnmap //Py。nmap调用库python
|
||||
@ -48,7 +49,7 @@
|
||||
- https://github.com/Yukinoshita47/Yuki-Chan-The-Auto-Pentest //集成子域名枚举、nmap、waf指纹识别等模块的web应用扫描器
|
||||
- https://github.com/ring04h/wyportmap //调用nmap目标端口扫描+系统服务指纹识别
|
||||
- https://github.com/cloudflare/flan //Py。cloudflare基于nmap开发的漏洞检测工具
|
||||
- https://github.com/offensive-security/masscan-web-ui/ //PHP。Masscan WebGui
|
||||
- https://github.com/offensive-security/masscan-web-ui/ //PHP。Masscan WebGui。
|
||||
## Kali环境拓展插件相关工具
|
||||
- https://github.com/Jack-Liang/kalitools/ //Kali Linux工具文档翻译，汉化kali
|
||||
- https://github.com/secforce/sparta //Py。界面化，联动Nmap、Nikto、Hydra等工具
|
||||
|
||||
@ -15,7 +15,6 @@
|
||||
- https://github.com/RASSec/A_Scan_Framework //漏洞管理、资产管理、任务扫描系统
|
||||
# 空间测绘
|
||||
- https://github.com/nmap/nmap //Lua。Nmap扫描器具有有强大的脚本引擎框架。greatjob。
|
||||
- https://raw.githubusercontent.com/nmap/nmap/master/nmap-service-probes //资产识别指针、配置文件。greatjob。
|
||||
- https://github.com/cea-sec/ivre //Py。网络资产指纹发现，bro/argus/nfdump/p0f/nmap/zmap/masscan/数据库mongoDB。G:/nanshihui/Scan-T;G:/LangziFun/LangNetworkTopology3;--
|
||||
- https://github.com/zmap/zmap //C。无状态扫描，可使用C编写扩展模块。censys三件套。
|
||||
- https://github.com/zmap/zgrab2 //Go。配合zmap/ztag的指纹抓取工具。censys三件套。G:/chichou/grab.js;--
|
||||
|
||||
Loading…
Reference in New Issue
Block a user