mirror of
https://github.com/euphrat1ca/Security-List.git
synced 2026-06-30 21:09:51 +08:00
283
283
This commit is contained in:
whoami
parent
3214a944ac
commit
713ee4eeda
@ -38,6 +38,7 @@
|
||||
- https://github.com/alexbredo/honeypot-camera //PY.摄像头蜜罐。tornado模拟WEB服务，图片代替视频，可以考虑后期多加点图片和按钮
|
||||
- https://github.com/EasyDarwin/EasyIPCamera //C.RTSP服务器组件用以构建摄像头蜜罐
|
||||
### 工控蜜罐
|
||||
- https://www.freebuf.com/articles/ics-articles/230402.html //一种工控蜜罐识别与反识别技术研究与应用实践
|
||||
- https://github.com/sjhilt/GasPot //模拟油电燃气工控系统
|
||||
- https://github.com/djformby/GRFICS //IoT工业仿真系统模拟框架，采用MODBUS协议对PLC虚拟机监视和控制
|
||||
- https://github.com/RabitW/IoTSecurityNAT //IoT测试系统，方便快速接入各种设备，进行安全测试
|
||||
|
||||
@ -9,9 +9,6 @@
|
||||
- https://github.com/shodan-labs/iotdb //nmap配合shodan API扫描IoT设备
|
||||
- https://github.com/ElevenPaths/HomePWN //PY.瑞士军刀类型IOT设备安全测试
|
||||
- http://tongxinmao.com/Topic/Detail/id/6 //通信猫调试软件。tcp udp协议调试
|
||||
### 无人机安全
|
||||
- https://github.com/dhondta/dronesploit //PY3.基于sploitkit无人机测试框架。
|
||||
- https://github.com/samyk/skyjack //PERL.基于aircrack破解无人机无线网络，进行飞机劫持
|
||||
### 设备固件安全
|
||||
- https://github.com/scriptingxss/owasp-fstm/ //OWASP固件安全测试条例
|
||||
- https://www.pentestpartners.com/security-blog/how-to-do-firmware-analysis-tools-tips-and-tricks/ //固件硬件逆向分析方法技巧
|
||||
@ -29,7 +26,10 @@
|
||||
- https://github.com/cwerling/psptool //PY.分析和解析AMD安全处理器的固件工具包
|
||||
- https://github.com/nodemcu/nodemcu-flasher //Pascal.firmware Flash tool for nodemcu，包括“ESP8266Flasher.exe”。
|
||||
- https://www.amobbs.com/thread-5703833-1-1.html //【正点原子】XCOM串口调试助手软件
|
||||
### 车联网智能汽车安全
|
||||
### 无人机安全
|
||||
- https://github.com/dhondta/dronesploit //PY3.基于sploitkit无人机测试框架。
|
||||
- https://github.com/samyk/skyjack //PERL.基于aircrack破解无人机无线网络，进行飞机劫持
|
||||
### 车联网安全
|
||||
- https://github.com/jaredthecoder/awesome-vehicle-security //一个用于了解车辆安全和汽车黑客的资源清单
|
||||
- https://github.com/pasta-auto //智能汽车测试
|
||||
- https://github.com/schutzwerk/CANalyzat0r //PY.专有汽车协议的安全分析工具包
|
||||
@ -52,19 +52,17 @@
|
||||
- https://github.com/googleinurl/RouterHunterBR //PHP.路由器设备漏洞扫描利用
|
||||
- https://github.com/scu-igroup/telnet-scanner //Telnet服务密码撞库
|
||||
- https://github.com/Viralmaniar/Passhunt //PY.simple。用于搜索网络设备Web应用程序等的默认凭证。包含523个厂家的2084组默认密码
|
||||
## ICS工控安全
|
||||
- https://github.com/hslatman/awesome-industrial-control-system-security //工控系统安全方向优秀资源收集仓库
|
||||
- http://www.icsmaster.org/archives/ics/942 //工匠安全实验室，工控安全工具集，技术文章复现研究。P:plcscan.org/blog/ //烽台科技灯塔实验室;W:freebuf.com/ics-articles //工控分类;--
|
||||
- https://collaborate.mitre.org/attackics/index.php/Main_Page //ICS工业安全 ATT&CK矩阵类。
|
||||
- https://github.com/ITI/ICS-Security-Tools //工控安全资源。国内外文章、脚本、固件、协议库、数据包、相关工具。G:euphrat1ca/ICSwiki;
|
||||
- https://github.com/hslatman/awesome-industrial-control-system-security //Industrial Control System (ICS) security安全集
|
||||
- http://jzgkchina.com //剑指工控 工控基础知识。W:linuxscada.info;
|
||||
- 公众号：【视频-公开课】SCADA系统安全技术—入侵检测 //1分钟公开课系列
|
||||
## ICS工业安全
|
||||
- https://www.freebuf.com/ics-articles //工控分类。P:author/黄一113530;P:author/yy0308;W:plcscan.org/blog/ //烽台科技灯塔实验室;W:icsmaster.org //工匠安全实验室
|
||||
- http://paper.tidesec.com/Tide-ics-paper/ //Tide安全团队-工控安全专题。W:freebuf.com/column/209611.html;--
|
||||
- https://www.freebuf.com/articles/network/178251.html //工控安全现场实施经验谈之工控系统如何加强主机防护。
|
||||
- http://plcscan.org/blog/2014/08/ics-security-attack-demo-rail-transit/ //工控安全攻防演练场景实现分享（轨道交通）。W:乌云工控漏洞;--
|
||||
- https://collaborate.mitre.org/attackics/index.php/Main_Page //ICS工业安全 ATT&CK矩阵类。
|
||||
- https://github.com/hslatman/awesome-industrial-control-system-security //Industrial Control System (ICS) security安全集。G:ITI/ICS-Security-Tools;G:euphrat1ca/ICSwiki;--
|
||||
- http://jzgkchina.com //剑指工控 工控基础知识。W:linuxscada.info;--
|
||||
- 公众号：【视频-公开课】SCADA系统安全技术—入侵检测 //1分钟公开课系列
|
||||
- https://zhuanlan.zhihu.com/p/93070821 //工控CTF技能点学习总结
|
||||
- http://paper.tidesec.com/Tide-ics-paper/ //Tide安全团队-工控安全专题。W:freebuf.com/column/209611.html;--
|
||||
### ICS工具框架集
|
||||
## ICS工具框架集
|
||||
- http://www.freebuf.com/sectool/174567.html //工业控制系统（ICS）安全专家必备的测试工具和安全资源。G:w3h/icsmaster;--
|
||||
- https://www.controlthings.io/ //SamuraiSTFU ics kali
|
||||
- https://github.com/moki-ics/moki //一键配置类似于kali的工控渗透测试系统的脚本
|
||||
@ -72,14 +70,17 @@
|
||||
- https://gitlab.com/expliot_framework/expliot //PY3.工控安全漏洞测试框架
|
||||
- https://github.com/dark-lbp/isf //PY2.基于routersploit框架开发的ISF(Industrial Control System Exploitation Framework)。
|
||||
- https://github.com/w3h/isf //py2.基于NSA工具Fuzzbunch攻击框架开发的工控测试框架。工匠实验室。
|
||||
- https://dragos.com/community-tools/ //工业网络安全公司 Dragos Inc.发布的Integrity（Sophia）被动ICS网络资产发现，CyberLens关于ICS数据包处理\捕获\可视化显示。
|
||||
- https://github.com/nsacyber/GRASSMARLIN //SA 开发的工控 ICS/SCADA 态势感知开源工具。
|
||||
- https://github.com/digitalbond/Redpoint //ICS识别所用nse脚本
|
||||
- https://github.com/XHermitOne/icscanner //界面化ics扫描器
|
||||
### ICS 资产探测
|
||||
- https://dragos.com/community-tools/ //工业网络安全公司 Dragos Inc.发布的Integrity（Sophia）被动ICS网络资产发现，CyberLens ICS数据包处理\捕获\可视化显示。
|
||||
- https://github.com/splone/splonebox-core //C。工业控制系统的网络评估工具。G:cisagov/cset/;--
|
||||
- https://github.com/nsacyber/GRASSMARLIN //Java。NSA 的工控 ICS/SCADA 数据捕获、态势感知、被动嗅探。
|
||||
- https://github.com/digitalbond/Redpoint //perl。ICS识别所用nse脚本
|
||||
- https://github.com/XHermitOne/icscanner //py。界面化ics扫描器
|
||||
- https://github.com/HatBoy/Pcap-Analyzer //py3。可视化的离线pcap数据包分析器。testjob。
|
||||
### ICS代理转发远程访问
|
||||
- https://github.com/knownsec/KCon/blob/master/2018/25日/25日No.4-PLC远控-剑.pdf/ //写入西门子FC块端口复用，用于反向代理接管操作设备，工控木马plc远控
|
||||
- http://www.icsmaster.org/archives/ics/690/ //通过Siemens1200 Tsend和Trev模块实现socket代理功能
|
||||
### 工控协议
|
||||
## 工控协议
|
||||
- https://www.freebuf.com/articles/ics-articles/167079.html //深度解析工控网络流量特点
|
||||
### ics 西门子S7安全
|
||||
- http://snap7.sourceforge.net/ //以太网32/64位多平台S7 PLC通信套件
|
||||
@ -92,6 +93,9 @@
|
||||
### ics modbus安全
|
||||
- https://github.com/yanlinlin82/plcscan //通过TCP/102和TCP/502识别互联网上PLC设备和其他Modbus设备
|
||||
- https://github.com/ezelf/modbusKiller //py.Schneider Dos PLC Modicon via Modbus Injection。CVE-2017-6017。Github:Exploit-install/smod;--
|
||||
### 工控模拟仿真
|
||||
- https://github.com/thiagoralves/OpenPLC_v3 //C++.最基本plc
|
||||
## 工控模拟仿真
|
||||
- wiki_Honeypots //工控蜜罐
|
||||
- https://github.com/thiagoralves/OpenPLC_v3 //C++.自定义多用途PLC软件
|
||||
- https://www.openplcproject.com/plcopen-editor //OpenPLC Editor是plc编程软件
|
||||
- https://www.openplcproject.com/reference-installing-scadabr //Linux下开源的监控和数据采集（SCADA）系统，web界面。G:thiagoralves/ScadaBR_Installer;--
|
||||
- https://www.modbustools.com/index.html //modbus模拟软件
|
||||
@ -31,7 +31,7 @@
|
||||
- https://github.com/euphrat1ca/OtherScript/blob/master/coremail_vul_check.sh //coremail配置文件泄露导致用户导出/资产泄露/邮件伪造发送
|
||||
- https://github.com/dpu/coremail-address-book/ /go。Coremail邮件系统组织通讯录导出脚本
|
||||
- https://slides.com/securitymb/prototype-pollution-in-kibana#/ //kibana <6.6.0 未授权远程代码命令执行。Kibana CVE-2019-7609 RCE Exploit
|
||||
- https://github.com/wyzxxz/fastjson_rce_tool //java。fastjson-v1.2.47-RCE命令执行利用工具。G:jas502n/fastjson-RCE;--
|
||||
- https://github.com/wyzxxz/fastjson_rce_tool //java。fastjson-v1.2.47-RCE命令执行利用工具。G:jas502n/fastjson-RCE;G:iSafeBlue/fastjson-autotype-bypass-demo;--
|
||||
- https://www.corben.io/atlassian-crowd-rce/ //JAVA.atlassian crowd,CVE-2019-11580。
|
||||
- https://github.com/c0d3p1ut0s/CVE-2019-12086-jackson-databind-file-read //CVE-2019-12086。利用jackson进行MySQL服务器任意文件读取漏洞
|
||||
### thinkphp漏洞
|
||||
|
||||
Loading…
Reference in New Issue
Block a user