README_2018.md

数据--所有

数据--年度

2018 信息源与信息类型占比

微信公众号 推荐

nickname_english	weixin_no	title	url
钱塘门外的互联网散修	gh_c0f99b1c4d3f	从传统安全转行风控领域的心路历程，兼谈黑产和风控行业趋势	https://mp.weixin.qq.com/s/GWOjp1E2B4J0efUjFBnp8Q
网络安全舆情研究	gh_ae174f02a41b	【原创 · 纵横】构建网络攻击响应框架的政治考量	https://mp.weixin.qq.com/s/iOq84kVblAW5a2mK2GDJwA
网易安全中心	NetEaseSRC	关于Shiro反序列化漏洞的延伸—升级shiro也能被shell	https://mp.weixin.qq.com/s/NRx-rDBEFEbZYrfnRw2iDw
特大号	ITXXXL	2018安防监控、雪亮工程项目盘点！	https://mp.weixin.qq.com/s/Sz8HguJ0X13nw4ajAhxOhg
点融安全应急响应中心	dsrc_dianrong	点融开源AgentSmith HIDS--- 一套轻量级的HIDS系统	https://mp.weixin.qq.com/s/4saEV6fWimqfII2_7PUQ8Q
湛卢工作室	xuehao_studio	社工模拟——利用BadUSB穿透3层内网	https://mp.weixin.qq.com/s/LxIgWu8pmNArFU1gOUMWJw
柯力士信息安全	JW-assoc	以色列神秘8200“军工厂”和它孵化的37家安全公司（上篇）	https://mp.weixin.qq.com/s/F6kmHw1x9GELXN7bgTOIHw
斗象智能安全	Riskivy	网藤能力中心 , Nuxeo 认证绕过和RCE漏洞（CVE-2018-16341)分析	https://mp.weixin.qq.com/s/3luD0uRGYINm3f56df9UYQ
量子位	QbitAI	深度学习装机指南：从GPU到显示器，全套硬件最新推荐	https://mp.weixin.qq.com/s/YLGjsd6eqYODjFa6XUce3w
守护者计划	shzjh0401	投资养老，会员返利，揭露养老庄园的骗局！	https://mp.weixin.qq.com/s/z9y1_Y9l0fpWy9v_Qpi4Fg
四维创智	Cerberus-4X	认识二进制安全与漏洞攻防技术（Windows平台）	https://mp.weixin.qq.com/s/10NEuo0z4SZ--qRZmgy5MQ
云加社区	QcloudCommunity	如何构建一个相对安全的账号体系？	https://mp.weixin.qq.com/s/pNHthmCvRPFCNpOrMyyTPg
VIPKID安全响应中心	vk_src	VIPKID安全中心自研github安全监控系统开源啦	https://mp.weixin.qq.com/s/4W42FLdfiO4cu7gykthe9A
31QU	blockchain31		https://mp.weixin.qq.com/s/I2gatFhkEs1GpGPHC97PnQ
郑海山dump	zhsdump	从张焕杰的《校园网站安全防护之Nginx》说开	https://mp.weixin.qq.com/s/oY8QMnfBO81xRuBxqOG_lg
透雾	wxWinder	2018年APT攻击事件回顾	https://mp.weixin.qq.com/s/CdwF5eRddzMwA8WpteH6AA
OPPO安全应急响应中心	opposrc	Docker容器时代安全实践	https://mp.weixin.qq.com/s/dgnoD2LG0kxKW-HkBYVuoQ
知远战略与防务研究所	knowfar2014	开源情报在网络战研究中的实践	https://mp.weixin.qq.com/s/C-coVLE3BmwkRgyd4xIJug
白帽100安全攻防实验室	whitecap100_team	湖湘杯线下AWD记录	https://mp.weixin.qq.com/s/yv8Lsc1WqWqeH-GtWnXA5Q
呼伦贝尔24小时警局	hlbrga	电信诈骗手法整理归纳图	https://mp.weixin.qq.com/s/q8uaik170cDjLFzj2wbKrg
DVPNET	DVPNET	公链安全之亦来云多个远程DoS漏洞详解	https://mp.weixin.qq.com/s/oACHhus9nvAiw13Yxy7zgA
天融信阿尔法实验室	gh_0b0b1747bf15	Linux下的Rootkit驻留技术分析	https://mp.weixin.qq.com/s/tvl4W7gg8Y6i8b_LFfTdpA
FraudBoom	Madmanerss	业务威胁之细说网盘泄露风险	https://mp.weixin.qq.com/s/TeXdjDcWLmLi4iw8ff9XvA
集智俱乐部	swarma_org	图网络——悄然兴起的深度学习新浪潮 , AI&Society第八期回顾	https://mp.weixin.qq.com/s/b89VhAluegTpQmSADTggDw
机械科学与技术	JXKXYJS	关于博/硕士论文撰写，这是最好的一篇文章！	https://mp.weixin.qq.com/s/KscXTyIOZAuvSYowJ_CK0g
安全引擎	SecEngine	内网渗透有它就够了，手把手教你破解CobaltStrike3.12	https://mp.weixin.qq.com/s/SuVrMNhGiTfdOTY1CmGRbw
24氪金	kingsof24		https://mp.weixin.qq.com/s/1-Jugo6njEudoFlZWditHg
网络安全应急技术国家工程实验室	NELCERT	智能门锁网络安全分析报告	https://mp.weixin.qq.com/s/ErK_HlBnohMy4lrIdvhxqA
科学出版社	sciencepress-cspm	美国公布长达35页的《2016—2045年新兴科技趋势报告》	https://mp.weixin.qq.com/s/okd_GK0-DzCDsuVB-yxoYQ
京东安全应急响应中心	jsrc_team	安全小课堂第118期【IOT漏洞挖掘之路由器】	https://mp.weixin.qq.com/s/ZSLYdpN4oG1ZSTvSdnVK2g
e安在线	ean-online	温故知新，一图看懂等保2.0 , 等保2.0标准已在国家安标委最终审批，不日出台	https://mp.weixin.qq.com/s/9V-eFVI0kHeUj27_2SYfhg
黑鸟	blackorbird	Triton针对工业系统的形势分析以及检测手段 ,, 后附今日情报资源	https://mp.weixin.qq.com/s/Nel6neXIHw5yXOsNzihQLA
机器学习算法与自然语言处理	yizhennotes	最强数据集50个最佳机器学习公共数据，可以帮你验证idea！	https://mp.weixin.qq.com/s/4jhtCUtv_szfMvyDCWKvoQ
机器之心	almosthuman2014	专栏 , 用神经推理来帮助命名实体识别	https://mp.weixin.qq.com/s/4qHgIcq9YJTj1iGh7kLB4w
二当家的12138	gh_e826f23d42e9	CCS 2018 会议小记 （一）	https://mp.weixin.qq.com/s/FYZSZGGHgNxaWPPGgp9vKA
腾讯防水墙	tencent_fsq	百万IP，千万暴利：追溯黑产最上游的掘金之地	https://mp.weixin.qq.com/s/kiF-HPg_bfgd6RGFF3sBtw
网信防务	CyberDefense		https://mp.weixin.qq.com/s/e6rsGPHw2XH1OZpiMQlaPA
支付宝技术	Ant-Techfin	CIKM 18 , 蚂蚁金服论文：基于异构图神经网络的恶意账户识别方法	https://mp.weixin.qq.com/s/oMFLtEULvIeX5Nu0K33lGw
南京刑事	wangyingqinglawyer	电信网络诈骗犯罪案件证据收集审查判断工作指引（浙江省）	https://mp.weixin.qq.com/s/lodWBnXkhAtCf4Rjv9liKA
华屹观察	huayineican	美国网络安全体系架构简介	https://mp.weixin.qq.com/s/Z1l286brHS_7zgTZHh3dDg
关键信息基础设施技术创新联盟			https://mp.weixin.qq.com/s/FyqSNy7Up4vBbLrmRKFjbQ
丰巢技术团队	hivebox_tech	TiDB at 丰巢：尝鲜分布式数据库	https://mp.weixin.qq.com/s/xFv90_VB7B9m2o6jvQ13Iw
中通安全应急响应中心	ZTO_SRC	中通分布式被动安全扫描实践	https://mp.weixin.qq.com/s/n9N6Nkg_RYEvPM2WnlG45w
雷锋网	leiphone-sz	海康威视总裁胡扬忠：安防市场的虚与实	https://mp.weixin.qq.com/s/7NfXcNC4bEtdT2RJ6vl3Ww
装备参考	Armament999	信息战部队：美国海军的新型作战力量	https://mp.weixin.qq.com/s/xq2Yoba8UPvZG6Hlv51rNQ
知识工场	fudankw	肖仰华 , 大规模知识图谱构建与应用	https://mp.weixin.qq.com/s/DlXzTpjLXAIrSmkuM_jDHg
电科防务	CETC-ETDR	【The Innovation Icon at 60】DARPA：60岁的“创新偶像”	https://mp.weixin.qq.com/s/xFRR5tJBc2C_SLxOIhlHaw
智能运维前沿	AIOps_Tsinghua	基于主动学习的异常检测	https://mp.weixin.qq.com/s/wxarbgNuasxaPsZ3Dh4z6g
安智客	china_safer	2018年中国网络安全产业报告	https://mp.weixin.qq.com/s/t54wFWBxA1iKr74LB_KFRg
云影实验室	Yunying_Lab		https://mp.weixin.qq.com/s/6FZqeG3ys2rYpuz7nXr_Lw
苹果资本	Applefunds	网络安全发展新时代新机遇	https://mp.weixin.qq.com/s/KpTSoXsDi2PCfrJxRensqg
红队防线	klionsec	跨平台横向移动 [ wmi利用 ]	https://mp.weixin.qq.com/s/7YidkhJvmVBxFhYcD7pIfQ
安全小飞侠	AvFisher	甲方安全建设的一些思路和思考	https://mp.weixin.qq.com/s/quwaJMVHYpBAXpkgtR12Kw
国家信息安全服务资质	gh_2e911008c3ff	中国信息安全测评中心孙明亮 位华 王琰：风险评估服务能力成熟度模型研究	https://mp.weixin.qq.com/s/y9Qx4htmcoWgC96G2sWvpw
DWord	gh_d3505f95dd6c	正解HTTPS与中间人攻击	https://mp.weixin.qq.com/s/E0_NRjpsyCCZtNgzuXU5Jw
安惞杂谈	anxin_zatan	基于DREAD模型的漏洞等级计算	https://mp.weixin.qq.com/s/-gHMhj1Qdl1N5rCne61m4Q
安云信息	Anyuntec	Web安全实战系列：SQL注入漏洞	https://mp.weixin.qq.com/s/m6bsWlJ3Yj1YMFZwz5uHIQ
慢雾科技	SlowMist	⼀个通杀绝⼤多数交易平台的 XSS 0day 漏洞	https://mp.weixin.qq.com/s/yfbKf_5Nk2NXFl2-xlFqKg
徐阿衡	xu_a_heng	知识抽取-实体及关系抽取	https://mp.weixin.qq.com/s/I8TmSSQxJPG7KudHKqDrtA
MottoIN	mottoin		https://mp.weixin.qq.com/s/12BfVA1yNFJPF_9boZraVQ
长亭科技	Chaitin_Tech	牧云（CloudWalker）开源手记 , Webshell 监控检测策略初探	https://mp.weixin.qq.com/s/7TuUqdleZc5xbZG5Xh3f3Q
维他命安全	VitaminSecurity	Android平台间谍软件BusyGasper分析	https://mp.weixin.qq.com/s/gkELP2C_Uftyca4hT5rEow
平安集团安全应急响应中心	PSRC_Team		https://mp.weixin.qq.com/s/6q3zAaS4jV_Mw3qvgtngBw
信息时代的犯罪侦查	infocrime	破解手机QQ聊天记录内容八个问题	https://mp.weixin.qq.com/s/XPeM95rpzPbVqRnDG01PiQ
企业安全工作实录	xiaohuangsec	漏洞治理平台的设计与实现	https://mp.weixin.qq.com/s/kqp6kj7CcfV6sFBTzZzZsw
ArkTeam	gh_16875f8ce964	使用深度学习的方法对恶意web内容进行快速检测	https://mp.weixin.qq.com/s/EmEofhgwr2ze93W7Q8yB7Q
腾讯技术工程	Tencent_TEG	威胁情报大会直击 , 企业IT部王森：腾讯企业终端安全管理最佳实践	https://mp.weixin.qq.com/s/g_x_xpbyKKQkLNpYnMqaXg
人民公安报	rmgabs	公安机关“净网2018”专项行动破刑案2.2万余起（附十大典型案例）	https://mp.weixin.qq.com/s/ZsI4LEmshKoppeeqM4nsrA
掮客酒馆	SecurityPub	互联网公司移动安全领域的探索与实践	https://mp.weixin.qq.com/s/5whLNkfSUpW6zQNxQf7HqQ
学蚁致用	sudo_i	AntSword2 安装指南	https://mp.weixin.qq.com/s/IezN9aYCn51t1ZQ7wX3X3Q
云众可信	yunzhongkexin		https://mp.weixin.qq.com/s/bP2pRgrTsQtJfIh5fhlpRA
网安国际	inforsec	InForSec区块链安全研讨会成功召开	https://mp.weixin.qq.com/s/t_HjrMeiVpfGS4m49HOllQ
机器学习AI算法工程	datayx	大神总结的机器学习的数学基础，掌握这些足够	https://mp.weixin.qq.com/s/Cm-DNNLMqgcp_DJqUeM-Tw
安全酷	watsec	企业数据安全建设的经历与实践	https://mp.weixin.qq.com/s/ItvWWhC0iYOpG6nQ3WPfvg
安全喷子	gh_2a9c00f1d053	自适应安全架构的历史和演进	https://mp.weixin.qq.com/s/6BmRdNPKG2dA7m1DrdGtkQ
卫星与网络	satnetdy	NASA开源软件实践与思考	https://mp.weixin.qq.com/s/-9BlAQqApaoGLfRgtJIn7Q
腾讯安全应急响应中心	tsrc_team	技术专栏 , 深入理解JNDI注入与Java反序列化漏洞利用	https://mp.weixin.qq.com/s/cyeEAv31GO_hZCTXVRBkxw
安全与生活	HitCache	金融业网络安全攻防比赛热身赛writeup	https://mp.weixin.qq.com/s/gwtdAeBy6dKViiZJbgKMSA
APT观察	APT_REVIEW	美司法部对12名俄罗斯情报人员的起诉书里证明了什么？	https://mp.weixin.qq.com/s/0KO-P-himo_AHeDJIQB8iw
该帐号已冻结	close_3286883548	卡巴斯基：2018 Q2 DDoS攻击报告	https://mp.weixin.qq.com/s/F-S0bVHxNzanNt35PQhcAw
网络法实务圈	cyberlaw2017	小米李昳婧 , GDPR的合规与实践	https://mp.weixin.qq.com/s/Io1A2dlj8FT57sWSHTNvGQ
极验	geetest_jy	极匠专访 , 猪八戒网安全负责人陈继安—理想的安全是人和技术的融合	https://mp.weixin.qq.com/s/AHkevK0uizizWG8fIcXWMQ
唯品会安全应急响应中心	VIP_SRC	安全防护系统构设计与实践	https://mp.weixin.qq.com/s/jV59TEoH9lO6tEnT59rycA
人工智能头条	AI_Thinker	微信高级研究员解析深度学习在NLP中的发展和应用 , 公开课笔记	https://mp.weixin.qq.com/s/IA0kPncWRVx0JBQXvJLY6w
银河安全实验室	Galaxy-Lab		https://mp.weixin.qq.com/s?__biz=MzIwNTcxNTczMQ==&mid=2247483838&idx=1&sn=e7147aadaf020a2d4960e2056b1ea6ef
美团技术团队	meituantech	美团如何基于深度学习实现图像的智能审核？	https://mp.weixin.qq.com/s/fnX7iH3S5k-hYTJQgNMJVw
点融黑帮	DianrongMafia	数据库安全建设思路探索	https://mp.weixin.qq.com/s/h-DGDGpvxXaMgLLtQlvajw
漏洞战争	vulwar	编译原理在安全领域的应用	https://mp.weixin.qq.com/s/6SqdcbyABfBxSaNfDlFKog
数据分析	ecshujufenxi	关于用户画像那些事，看这一文章就够了	https://mp.weixin.qq.com/s/cHinmVC5o9DApFcI5odxNQ
力博睿生	liberationers	第七课视频回放：高春辉给IP画个像	https://mp.weixin.qq.com/s/9aFbbPrSDRr88KDcdZ1g4Q
互联网安全实务	SecPractice	互联网反欺诈体系漫谈	https://mp.weixin.qq.com/s/WAzCLk_6nkQ0Aap6Sx2lPw
汉客儿	gh_418dfd27e592	2345内核拒绝服务漏洞（3）- WORD的锅	https://mp.weixin.qq.com/s?__biz=MzI1NTUzMjUzMQ==&mid=2247483808&idx=1&sn=5a18e557b4f52f43b4bb8794d9e8aa67&chksm=ea35cd3cdd42442ab
仙人掌情报站	sec-cactus	吕毅：从攻击视角构建弹性信息安全防御体系	https://mp.weixin.qq.com/s/8RtSjpRlC_AdM354XeluLw
EMLab攻防实验室	EM-Lab	一款用于可视化分析恶意登录Windows系统的安全日志取证工具	https://mp.weixin.qq.com/s/-NxWRMbCV_wLNssBwFkb4A
铭毅天下Elasticsearch	elastic999	严选 , Elasticsearch史上最全最常用工具清单	https://mp.weixin.qq.com/s/s2ema4tIXKcqTNUUhjGt1w
瑶台视界	worldview18	兰德报告《与中国开战》46000字全译本	https://mp.weixin.qq.com/s/hKz9HNmt49av5I0teKIFHg
深信服千里目安全实验室	Further_eye	灰熊矿业？BearMiner的创业之路	https://mp.weixin.qq.com/s/NEvX_Od3dgQrk9fHHV62Mw
战略前沿技术	Tech999	【The ABCs of DARPA】26个字母带你了解DARPA	https://mp.weixin.qq.com/s/vl6OcqS5v7oP-8PrW95Pww
安全客	anquanbobao	WCTF，一场属于黑客的世界杯狂欢	https://mp.weixin.qq.com/s/JUbs4wPBDSGUIEjORjvXCw
安全实践	SecurityPractice	IoT安全测试之通信测试环境及方法	https://mp.weixin.qq.com/s/yPNxqzQ0qHtQarNBUPBzQg
Viola后花园	Viola_deepblue	从M-Trends 报告的两个指标谈起	https://mp.weixin.qq.com/s/_eVf8RZgHGsMTo-jsCGGJQ
PaperWeekly	paperweekly	使用PaddleFluid和TensorFlow训练RNN语言模型	https://mp.weixin.qq.com/s/JULU6bO7sPUbEJZ9tUDqiQ
金融电子化	fcmag1993	实战Practice丨基于攻击视角完善信息安全弹性防御体系的思考	https://mp.weixin.qq.com/s/DDfdRVaVvTgQ5ldXqmgQ3g
天御攻防实验室	TianyuLab	Security Onion使用手册（一）：愿者上钩	https://mp.weixin.qq.com/s/x_AJTqinGvLESu3_bFursg
JavaGuide	Java_Guide	可能是把Docker的概念讲的最清楚的一篇文章	https://mp.weixin.qq.com/s/xSbYTJmLuqsyYEDEIsndZw
DoraHacks	dorahacks		https://mp.weixin.qq.com/s/aUS7qm6T7FT1fgj17oUR1A
论智	jqr_AI	一文概览机器学习面临的所有攻击类型	https://mp.weixin.qq.com/s/ixdE3ld0qOOpj7F_kLmmSg
未来技术站	xingren-tech	容器管理利器：Web Terminal 简介	https://mp.weixin.qq.com/s/zlHJTxDeHgjn9A9XuYp9fQ
敏信安全课堂	mxaqkt	敏信审计系列之EOS开发框架	https://mp.weixin.qq.com/s/4Ejshk7x71L9INB0grj5mw
工业信息安全产业发展联盟	gh_1dd54c948986	【首发】2018年以色列网络周内塔尼亚胡总理演讲实录（附实录翻译内容）	https://mp.weixin.qq.com/s/UVsGnhCaoMQv_snvXKx5xw
永安在线订阅号	threathunter888	访谈｜在网络世界捕获威胁的猎人	https://mp.weixin.qq.com/s/IfmKbGyW8gjWkBMtRM0aKw
安世加	asjeiss	邮件安全防护实践—“安全+”沙龙第七期	https://mp.weixin.qq.com/s/zwzbxf5CbKohkOCJUjvXcA
嘶吼专业版	Pro4hou	通过Joe Sandbox Linux沙箱对VPNFilter的分析报告	https://mp.weixin.qq.com/s/MsLj0rNAVrXQYhf8x7dR1A
业务连续性+	bcmplus	每周阅读文摘20180613	https://mp.weixin.qq.com/s/TlRghlJFeLA0ZUhh6Z38WA
sosly菜鸟笔记	sosly_me	互联网安全小兵的日常：如何“体面”地与业务打交道	https://mp.weixin.qq.com/s/eHpKq3IZIz0RugBubFgUww
TGO鲲鹏会	tgo-kunpenghui	打造高效研发团队 —— 组织架构篇	https://mp.weixin.qq.com/s/P6bglKh7wsm483dPqXCjkQ
CNCERT风险评估	cncertfengxianpinggu	开源软件源代码安全缺陷分析报告——框架类软件专题	https://mp.weixin.qq.com/s/9zldhnbPYJy_YHPVXXk8ag
爱奇艺安全应急响应中心	iqiyi_71src	从AWVS插件到伪代理扫描	https://mp.weixin.qq.com/s/RCyz0iizsm9Bxl3hO-fmkQ
威努特工控安全	winicssec_bj	技术分享,工控漏洞挖掘方法之固件逆向分析	https://mp.weixin.qq.com/s/OS4ESfOACW9lhjxzt7B9xw
分布式实验室	dockerone	一些小团队的自动化运维实践经验	https://mp.weixin.qq.com/s/95RDW5Fq3ooAzJWiAPRRFA
传媒观察杂志	chuanmeiguancha	国防大学教授周伟业：老一代黑客是“创造”的一代，新一代黑客是“破坏”的一代	https://mp.weixin.qq.com/s/eHKG26GgCuG3gg6qkJdGHw
京东数科安全	JDJRsecurity		https://mp.weixin.qq.com/s/B9NhWSQyWKcUeeagArnwjA
小米安全中心	misrc_team	爬虫调度篇[Web 漏洞扫描器]	https://mp.weixin.qq.com/s/MO40KHt7cAMg5HPpydJgOg
AI科技大本营	rgznai100		https://mp.weixin.qq.com/s/dWVPLd3T5uEnCANdDa1Qfw
网络法学研究院	wlfx2017	“网络电子存证”模拟庭审成功举办	https://mp.weixin.qq.com/s/nBZ8yeWDlnBMIZ05Srh-dQ
矛盾实验室	MDLab2017	Cobalt Strike入门教程	https://mp.weixin.qq.com/s/0imwEZ3KLnYAk_TScBJbOQ
菜鸟博客	Cainiao_sec	Acunetix11-API接口开发利用	https://mp.weixin.qq.com/s/UVdOPStSVM5-6ekj4BqJfQ
晨星先生	givemeshell	利用网络测绘深挖博彩平台的产业链	https://mp.weixin.qq.com/s/aOlZmdzzye2AsqGDa3hcbg
进击的大熊	JinJi_DaXiong	图文教程：无限刷BEC币与漏洞分析（多图预警）	https://mp.weixin.qq.com/s/CLq9jkHon8QJgO_rnBA9Yw
双螺旋Sec团队	double_helix_sec	suPHP安全那点事儿	https://mp.weixin.qq.com/s/mTHmagQaRttUrYLVtCzVTA
数据派THU	DatapiTHU	清华朱军团队包揽三项冠军 , NIPS 2017对抗样本攻防竞赛总结（附学习资料）	https://mp.weixin.qq.com/s/AuOFvbEl7sHpdbT4vFv46Q
云头条	YunTouTiao		https://mp.weixin.qq.com/s/y6wEiVqaRkXxGvDeUxO6-w
工控安全漫谈	gh_1dfbb29f0308	黑客组织 Orangeworm 针对全球医疗保健行业发起间谍活动	https://mp.weixin.qq.com/s/DhQAdkeXRW-22UPgB5iR6A
小强说	xiaoqiangcall	构建高质量攻击指标的几条建议	https://mp.weixin.qq.com/s/ZRiSi3bb-SkMc_54mWPgmw
crackershi	gh_6dcfa3e17ace	欧洲最严合规GDPR影响众多企业	https://mp.weixin.qq.com/s/nEMHu33qfO8GvDqStpVVuQ
SecPulse安全脉搏	SecPulse	CIA Hive Beacon Infrastructure复现1—使用Apache mod_rewrite实现http流量分发	https://mp.weixin.qq.com/s/SIFrdP-w3kvIhQGaAjhV-Q
新华视点	XHSXHSD	习近平：加速推动信息领域核心技术突破	https://mp.weixin.qq.com/s/S_HmemBo4wU22e6RJ_qDxw
大数据	hzdashuju		https://mp.weixin.qq.com/s/s8VLWjXrVCrTt4v2d3MoIQ
图灵人工智能	TuringAI01	王飞跃——生成式对抗网络GAN的研究进展与展望	https://mp.weixin.qq.com/s/QiIRIHiGv6u-4QfK8awKpw
网信军民融合	wxjmrh	科普 , 一文读懂各种拟态防御网络设备	https://mp.weixin.qq.com/s/FHyE0fbEzEEIQoxbX1vSVA
看雪学院	ikanxue	反虚拟机技术总结	https://mp.weixin.qq.com/s/UNys91yEBtC3QFCKy9bhWg
廖新喜	gh_66d4bda5ddf2	CVE-2018-1273: RCE with Spring Data Commons 分析和利用	https://mp.weixin.qq.com/s/bIY0PHvQEbNT2inhS5dZwg
占知智库	zzzk-0001	美国国家网络空间靶场（NCR）建设概况	https://mp.weixin.qq.com/s/GhuEu5-vQfKs25JFi2kDjw
IT桔子	itjuzi521	Google 布局的三家安全情报公司熟了，这个市场起飞了吗？	https://mp.weixin.qq.com/s/oRpI7DwWZLfUprxwS0nOew
合天网安实验室	hee_tian	由MetInfo 深入理解PHP变量覆盖漏洞	https://mp.weixin.qq.com/s/I7tEDv12e65KI93TCXN8Ug
众视AsiaOTT	AsiaOTTcom	关于5G网络安全需求和架构的白皮书《5G网络安全白皮书》	https://mp.weixin.qq.com/s/ReymClMeHOmx1_EjqOUZUg
丁爸 情报分析师的工具箱	dingba2016	【原创】犯罪情报分析师知识和能力清单（初稿）	https://mp.weixin.qq.com/s/i5iL6R6m_UtmXYGfrRa31w
iPolicyLaw	iPolicyLaw	‍公安部关于《公安机关互联网安全监督检查规定（征求意见稿）》公开征求意见的通知	https://mp.weixin.qq.com/s/Ytp3J2ZRRZTGB8QMu4EiIA
bigsec岂安科技	bigsec	Python工具分析风险数据【岂安低调分享】	http://mp.weixin.qq.com/s/46f1WM_1xDgxzwxqGmFJNQ
FreeBuf	freebuf	解读NSA对APT组织的透视	https://mp.weixin.qq.com/s/DfvAIZYuDTtNMkijJNledQ
绿盟科技	NSFOCUS-weixin	2018 RSA , 面对强大的网络威胁，即刻行动起来！	https://mp.weixin.qq.com/s/cH6_AWMXRNOoAm_lruF7SQ
开放知识图谱	OpenKG-CN	王仲远 , 基于概念知识图谱的短文本理解	https://mp.weixin.qq.com/s/avf72hYVq4WBJ63G6wlORA
宜信安全应急响应中心	CreditEaseSec	宜信漏洞管理平台『洞察』	https://mp.weixin.qq.com/s/24V5nJ47ZyAAYTU78mjgvg
安恒信息	DBAPP2013	7块钱的BadUSB	https://mp.weixin.qq.com/s/mIcRNcf5HmZ4axe8N92S7Q
天黑说嘿话	wintogether1	记一次爬虫批量爬取exp	https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247483860&idx=1&sn=c773f70165f5a48be62acdf8e0217f2d&chksm=ec53856ddb240c7b372d85c3912456b236f9b37e399e30c687b4596892cf5c399ef4ea9aeb18&scene=38#wechat_redirect
同程旅行安全应急响应中心	lysrc_team	利用插件对Chrome进行UXSS	https://mp.weixin.qq.com/s/2uYgr1hNbP_lUBYVREM6vg
云鼎实验室	YunDingLab	Exploiting Jolokia Agent with Java EE Servers	https://mp.weixin.qq.com/s/blpFK0oigTGtI_eVJxEL0w
中科院信息科技战略情报	xxkjzlqb	NSF3000万美元推动计算和信息科学领域前沿变革研究	https://mp.weixin.qq.com/s/WQ1JKpiYhe9-jb0RPsScIA
HenceTech	gh_75a8b5dd04be	QWB-2018 WEB partial solutions	https://mp.weixin.qq.com/s/xEBr7JxbSTt11oiBsgc3uw
DJ的札记	DJ_notes	Powershell+dnscat2实现DNS隐蔽隧道反弹Shell，和检测方法	https://mp.weixin.qq.com/s/5mDhzuGC2WEc8bdIjRg94w
云安全联盟CSA	csa_china	CSA报告, 《用区块链技术保障物联网安全》（附报告下载）	https://mp.weixin.qq.com/s/DShAaS_7YSYQle5FzyKGpQ
E安全	EAQapp	暗网：你的银行帐户值多少钱？	https://mp.weixin.qq.com/s/A8C1k2LQoJGiww8Wcsk-uA
DoSec容器安全	dosecs	GITC演讲PPT-Docker安全实践探索	https://mp.weixin.qq.com/s/Bb23b1XZba9eubXpNnKfNA
XCTF联赛	gh_3d7c7f90f79f	专访Eur3kA战队Atum队长：我们战队充满热情和活力	https://mp.weixin.qq.com/s/wKawjbRxyXwMxij4tlZ6jg
LBS	lbs-sir	美国“天网”系统：大数据算法下的滥杀	https://mp.weixin.qq.com/s/yEUN2uLsXqPLBC_JzEcK2A
CIO之家	imciow	京东海量运维的演进	https://mp.weixin.qq.com/s/V0hGKMvgnp3dq7BsFLiNhg
2045加速器	gh_9438f9d016a5	2018工业互联网红利爆发：政策战略、关键技术、典型案例深度解读！	https://mp.weixin.qq.com/s/XGLhdAljXv2nAJ_XL7WBeA
鲸犀	whalerhino	黑产猎人：老毕	https://mp.weixin.qq.com/s/Ii7dZSaN1XDWupYP8aVKIw
闻道解惑	wendao_jiehuo	Mozilla Rhino 反序列化漏洞 POC 分析	https://mp.weixin.qq.com/s/qm3mS78r43IIOHgZ-6YyGw
英国那些事儿	hereinuk	直接接管暗网网站，钓出几十万毒品买卖家信息！荷兰这波行动，越看越燃！	https://mp.weixin.qq.com/s/DqE9u4eSClAA7d1MFuUcBA
腾讯安全威胁情报中心	gh_05a6c5ec3f78	腾讯御见：Lazarus APT组织最新攻击活动揭露	https://mp.weixin.qq.com/s/-cCnpo1kBebvJ7WMRj65tg
网络通信与经济	ncel_cuhk	我的时间管理之路（一）	https://mp.weixin.qq.com/s/v_Uw6XbK3ksecPOH2bcDfw
绿盟科技研究通讯	nsfocus_research	威胁情报之落地实战-由灰向黑篇	https://mp.weixin.qq.com/s/-EcZnVvwBo2AEO7aHUIvMQ
敏信云极安全监测平台	gh_9d37130de7f6	敏信审计系列之dorado5开发框架	https://mp.weixin.qq.com/s/y1TOfw063Zh6DHhgLQPpzQ
大国策智库	statecraft	美国2018年版《国防战略报告》概要(全文翻译)	https://mp.weixin.qq.com/s/m_aj7s3X0MtDK1ADpV5dGQ
区块律动BlockBeats	BlockBeats	3月7日这一夜，黑客耍了所有人	https://mp.weixin.qq.com/s/z39hBMif1bQJeb4Ar_zRAw
1452	C50768	fineract v1.1.0 CVE三连爆	https://mp.weixin.qq.com/s/g3qha-O4gdMZQrPmXEcy_A
美的金融科技	MideaFintech	【安全那些事儿】金融科技SDL安全设计checklist	https://mp.weixin.qq.com/s/MR3SmOLj834LK4RBMcZ2pg
知识分子	The-Intellectual	学界与工业界的AI研究：有哪些重要不同？	https://mp.weixin.qq.com/s/mWaHqfCQKm1eJrZZIcgibA
百度安全实验室	BaiduX_lab	PaddlePaddle平台对抗样本工具包Advbox	https://mp.weixin.qq.com/s/_r6d2uQ3aHcOZe8uLKAbYg
永安在线情报平台	YongAnOnline	威胁猎人：2017年度中国互联网黑产报告	http://mp.weixin.qq.com/s/evGK8v2rjM4IGYODYXFvtA
密码学报	gh_25df631b2be8	密码科学技术国家重点实验室2018年开放课题发布	https://mp.weixin.qq.com/s/u1mDFINefmUEeeDsYrUsAw
大数据文摘	BigDataDigest	谷歌上线自带中文的机器学习免费课程，我们带你做了个测评	https://mp.weixin.qq.com/s/U2XBScWThbIEB4EdV4q63A
n1nty	n1nty-talks	Tomcat CVE-2018-1305 分析	https://mp.weixin.qq.com/s/PZsOQy2lpR1lHqLWmAXlbg
Bypass	Bypass--	【代码审计】iZhanCMS_v2.1 漏洞分析	https://mp.weixin.qq.com/s?__biz=MzA3NzE2MjgwMg==&mid=2448903583&idx=1&sn=172d776a85dc99863d6d9450ef940b1e&chksm=8b55ddc2bc2254d4ebff63e83031e422239aa4a945d5699cc2cfe2eb18e6cd413a90d41823d4&mpshare=1&scene=23&srcid=0303eUNXG8ydUHQN0DtMhZMy#rd
AI科技评论	aitechtalk		https://mp.weixin.qq.com/s/5UyAoAm0Llfm3YoobKSSCA
环球科学	huanqiukexue	中国白帽黑客成长记 , 专访清华“蓝莲花”战队	https://mp.weixin.qq.com/s/jbJJyWjmW-h7SI0YmYkElg
浅黑科技	qianheikeji	我遇到了一位“黑客造梦师”：仙果	https://mp.weixin.qq.com/s/mF4D-MGM6_6QA3_7XZSj0w
水滴安全实验室	EversecLab	2017年度蜜计划（蜜罐工作）总结	https://mp.weixin.qq.com/s/SIBGnMc-XIqy2Ohj1ni_fg
数据简化DataSimp	ChiefDataAnalyst	欧盟GDPR《一般数据保护法案》2018年5月25日正式生效[附全文中文版]	https://mp.weixin.qq.com/s/JhylKtarrpvpZlP--ARBRw
娱阅信情	Prof_WenchangShi	网安学科知识体系正式发布	https://mp.weixin.qq.com/s/uZFYl3xKT5-aWzvI3mmQ2A
CSecGroup	cSecGroup	应用安全:JAVA反序列化漏洞之殇	https://mp.weixin.qq.com/s?__biz=MzI3NzAzMjEyNg==&mid=2649530469&idx=1&sn=4a2ba687274aec2f44b29660b8567fcd&chksm=f3747db4c403f4a2c1fb3ac7cb869f347bfc74a838266ef55455d7b4495ab0481abef81e660f&scene=0&key=840d183eb8a3dbfa5f3f32cb8d30667e5030e61ccbe28114
阿里云安全	aliyunsec	独家技术分析 , 新型勒索病毒Mindlost	https://mp.weixin.qq.com/s/dEpW-pV51Z6fSdXu9pmEvQ
红日安全	sec-redclub	渗透测试 -- VulnHub –CTF FristiLeaks v1.3	http://mp.weixin.qq.com/s/vroN1CKPjf2x033E0e43vg
工业安全产业联盟	ICSISIA	原创 , 工业控制系统信息安全发展趋势大解析！	https://mp.weixin.qq.com/s/XmQ8v-vaBLz1mfBAIpMdYQ
安全威胁情报	Threatbook	安信证券聂君：矩阵式监控理论与实操	https://mp.weixin.qq.com/s/9W4mnzeN1-uZwy3RhPnRrA
安全优佳	securityjia	2017年“信息安全”项目公开招标TOP榜	https://mp.weixin.qq.com/s/ajDCSfVmw94GjPkuVSq_fw
奇安信安全监测与响应中心	QAX-CERT	360 A-TEAM 带你走进 NTLM-Relay	https://mp.weixin.qq.com/s/1LpgGx3-YA5aR0Mx9iryCQ
奇安信威胁情报中心	gh_166784eae33e	CVE-2018-4878 Flash 0day漏洞攻击样本解析	https://mp.weixin.qq.com/s/zJm-mr5-U5sBHdc3Qlx_3Q
天际友盟	gh_8833afc123ef	美国：“自动化指标共享计划”（AIS）	https://mp.weixin.qq.com/s/TZj7SFHEkL4q13GFngS0tw
国家互联网应急中心CNCERT	CNCERTCC	2017年钓鱼网站分布趋势报告	https://mp.weixin.qq.com/s/aDVIG7_QTaMCHAwgrqnHDA
君哥的体历	jungedetili	企业安全建设之安全规划	https://mp.weixin.qq.com/s/3QfCUFjpE_eI8QfqDrFIrg
malwarebenchmark	gh_01202b41c2f7	美退役军人网络安全培训排名	https://mp.weixin.qq.com/s/dR53Oa_WQ_A9_pvsbQ4JrQ
麦洛克菲内核开发	mallocfree001	这篇文章，可能会影响你未来十年甚至终身！	https://mp.weixin.qq.com/s/NaGk6KdHBczvyI_mr_Tg6g
高效运维	greatops	面向千万级用户的运维事件管理之路	https://mp.weixin.qq.com/s/iI0qRxzaLOk1xEpQ3XG-ew
青藤云安全实验室	qt_lab	【青藤实验室】wget 缓冲区溢出漏洞分析（CVE-2017-13089）	https://mp.weixin.qq.com/s/KW9ROTCMJyJ-mBt8dwBmBg
腾讯研究院	cyberlawrc	数据跨境流动政策认知与建议 , 网络法律评论	https://mp.weixin.qq.com/s/97MFf8-ZtJzz_D6zkYGbrw
老高的互联网杂谈	paulgao-net-talk	全球云服务商 IP 地址分析报告 2H 2017	https://mp.weixin.qq.com/s/5XRz-inuBpTn_IGQLTAXpg
懒人在思考	lazy-thought	深入研究的套路之黑客与区块链	https://mp.weixin.qq.com/s/7F2-eLqIdSiNIHHJDzkwcg
SecWiki	SecWiki	2017年安全行业年度报告汇总	https://mp.weixin.qq.com/s/guVljwZyvafts-SZY_Zwow
逢魔安全实验室	FormSec	SSRF To RCE in MySQL	https://mp.weixin.qq.com/s/9vk-H36erencugdYca9qXA
网络法前哨	cyberlawing	美国｜《涉外情报监控法修正案》第702条授权延长至2023年	https://mp.weixin.qq.com/s/aimlLub6dwPFGtCfFyjFUQ
百度公共政策研究院	InternetPolicyReview	易镁金：国家标准《信息安全技术 个人信息安全规范》评析	https://mp.weixin.qq.com/s/v3lWLXgTFyBicWLJ7DK3nQ
物联网智库	iot101	物联网全景动态图谱2.0,PaaS物联网平台汇总（上篇）	https://mp.weixin.qq.com/s/99W7NIR-fC7PF67oo2Ovlw
湖南金盾评估中心	JD83758161	等保2.0之如何确定信息系统安全保护等级	https://mp.weixin.qq.com/s/VrVBE7I4pCOd5BOnwIAs9A
互联网安全内参	anquanneican	实践：UEBA视角下的威胁情报聚类与攻击者分析	https://mp.weixin.qq.com/s/bm8jK8mLsYkWNH_fwIcPAg
三六零CERT	CERT-360	2、360CERT: 2017年度安全报告--勒索软件威胁	https://mp.weixin.qq.com/s/nJFii2oTEzKTnQNW04FXUQ
ChaMd5安全团队	chamd5sec	赛博地球杯初赛第三名，ChaMd5安全团队的writeup	https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247484574&idx=1&sn=91850fae13f6a478869f10fa176e3e8c
软件定义世界（SDX）	SDx-SoftwareDefinedx	今日头条算法原理	https://mp.weixin.qq.com/s/GnuuzHedLCSWj-VanHDhdA
美亚柏科	MeiyaPico	信息量巨大，解读两办《关于推进城市安全发展的意见》!	https://mp.weixin.qq.com/s/rsrieCI2zItZBcHVn22Q5A
网安寻路人	DataProtection101	构建数据时代的数据安全体系	https://mp.weixin.qq.com/s/_Wdi6RZfchA5g5Dp7TmWYg
安在	AnZer_SH	业界 , 2017年最受风投青睐的20家网络安全厂商榜单	https://mp.weixin.qq.com/s/ShTWSy27FXuqWJxTnfCzLg
V安全资讯	v-safe-cn	74cms v4.2.3前台任意文件读取	https://mp.weixin.qq.com/s/TnS8f8B1ntC3qvd4noc7nA
InfoQ	infoqchina	微信亿级用户异常检测框架的设计与实践	https://mp.weixin.qq.com/s/nXYrUgEhaCo4patd1YovOw
数说安全	SSAQ2016		https://mp.weixin.qq.com/s/b6iAwy_JxHwKBwrA-PsP5w
平安科技金融安全研究院	pinganfinsec	《金融安全态势感知系统构建》研究报告	https://mp.weixin.qq.com/s/FSoYqbOpoFBni1C8Di7J0A
安天	Antiylab	2017全球僵尸网络DDoS攻击威胁态势报告	https://mp.weixin.qq.com/s/EU89Ko1DVjsB4GSiq3Focw
安全测评联盟	gh_50f915a9fd52	美国《主动网络防御确定法案》（全译文）	https://mp.weixin.qq.com/s/32EyXTDWJXflKGDSim1KtQ
安全学术圈	secquan	国际安全学术会议截稿信息	https://mp.weixin.qq.com/s/zicl-lC1jCWdVnXWkO3eyQ
向日葵生活分享	SunF-security-share	Gartner:以数据为中心的审计和保护市场指南（节选）	https://mp.weixin.qq.com/s/PYQlfptjkj3sIebiieljNA
匠道人	ATech666	不是吐槽！阿里安全资深专家杭特辣评国内安全圈6大“怪现状”	https://mp.weixin.qq.com/s/eayCCAnfBW8LNEhDn5A0nw
中国信息安全	chinainfosec	行业 , 人工智能在网络安全领域的应用和发展新趋势	https://mp.weixin.qq.com/s/18cF-dC-LDbrB99lTpaLTA
sh3ll	gh_55ebf8cb4031	CVE-2018-5318：D-Link soap.cgi Stack Buffer Overflow	https://mp.weixin.qq.com/s/8C3jbfMy3sKCSdul4Y8Pcg
猎户攻防实验室	TassLiehu	安卓渗透利器AndroTickler排雷指北	https://mp.weixin.qq.com/s/xI3qLGRL9JmlBJL3mEP-iQ
斗鱼安全应急响应中心	DYSRC_	批量挖SRC漏洞的其中一种打开方式-基于cms的漏洞扫描设计与实现	https://mp.weixin.qq.com/s/zDAXg1dmTh1I6N4hGusT5g
我的安全视界观	CANI_Security	【应急响应】redis未授权访问致远程植入挖矿脚本（完结篇）	http://mp.weixin.qq.com/s/I1fNlytovsi7h715FFg3tg
工控参考	gkongnews	政策 , 工业控制系统信息安全行动计划发布	https://mp.weixin.qq.com/s/TE-uWlKflUCMUDzLAeaXSA
工信微报	gxwbwx	干货满满！工信部司局详解2018年重点工作思路（网安局、无管局）	https://mp.weixin.qq.com/s/sMRtE5_GExWj6lIVcSqMBg
安全牛	aqniu-wx	《中国网络安全企业50强》（2017年下半年）	https://mp.weixin.qq.com/s/5jl-V5SzXExhJ6qQHuil8Q
兜哥带你学安全	waf_ads_ids	企业安全建设之终端杀毒	https://mp.weixin.qq.com/s/jKYDdMNOL3Ebf5NjxkNqbA
信安标委	SACTC260	23项信安标委归口国家标准获批发布	https://mp.weixin.qq.com/s/vq4rr2bfcP0qCT-L5jTRyA
信安之路	xazlsec	用 360 随身 WiFi 钓鱼	http://mp.weixin.qq.com/s/dUVUswYm_3s67A6ZnXlu8A
中国保密协会科学技术分会	gh_be4f21d557c0	区块链的安全性浅析	https://mp.weixin.qq.com/s/VbmJAIApS7IhE6JreKKY1A
ZLabs	gh_339ee98cec1b	回看2017 , 威胁情报看威胁	https://mp.weixin.qq.com/s/dsafRx9ZcDBHWOEH8xLyAw
Python中文社区	python-china	用Python对用户评论典型意见进行数据挖掘	https://mp.weixin.qq.com/s/iytARh75EjYDnfxkBqnEOw
Panabit	Panabit-Beijing	路由器蠕虫触发的网络安全人工智能实战	https://mp.weixin.qq.com/s/O3apmnZDDZt2TrEHtwekUg

组织github账号 推荐

github_id	title	url	org_url	org_profile	org_geo	org_repositories	org_people	org_projects	repo_lang	repo_star	repo_forks
PacktPublishing	Mastering Machine Learning for Penetration Testing	https://github.com/PacktPublishing/Mastering-Machine-Learning-for-Penetration-Testing	https://www.packt.com	Providing books, eBooks, video tutorials, and articles for IT developers, administrators, and users.	Birmingham, UK	4260	32	0	C,Jupyter,Scala,Python,Kotlin,JavaScript,C++,C#,ABAP,Java	0	0
Microsoft	CFI 攻击与防御的发展历程,来自 MSRC 团队在 2018 OffensiveCon 会议的演讲:	https://github.com/Microsoft/MSRC-Security-Research/blob/master/presentations/2018_02_OffensiveCon/The%20Evolution%20of%20CFI%20Attacks%20and%20Defenses.pdf	https://opensource.microsoft.com	Open source, from Microsoft with love	Redmond, WA	2463	4258	0	C,TypeScript,CMake,C#,JavaScript,Objective-C,C++,Go,Python,Batchfile,HTML,Rich,Jupyter,Java,PowerShell	0	0
google	santa：A binary whitelisting/blacklisting system for Mac OS X	https://github.com/google/santa	https://opensource.google.com/	Google ❤️ Open Source	https://opensource.google.com/	1474	2547	0	C,TypeScript,Java,Python,Kotlin,JavaScript,C++,Go,Ruby,Rust	0	0
IBM	使用 Apache Spark 和 Elasticsearch 构建一个推荐系统	https://github.com/IBM/elasticsearch-spark-recommender/blob/master/README-cn.md	http://ibm.github.io		Armonk, New York, U.S.	866	885	0	TypeScript,Java,C++,Python,JavaScript,Julia,Shell,Smarty,Go,Jupyter,Swift,REXX	0	0
intel	xom-switch - 基于 Intel MPK 实现的 XOM 开关工具:	https://github.com/intel/xom-switch	mailto:[email protected]		[email protected]	616	24	0	C,Shell,Java,Python,JavaScript,C++,Rust	0	0
awslabs	git-secrets - 防止将敏感数据提交到 git 仓库的工具:	https://github.com/awslabs/git-secrets	http://amazon.com/aws/	AWS Labs	Seattle, WA	376	87	0	C,TypeScript,Java,Python,JavaScript,C++,C#,Shell,Go,Jupyter,Swift,Rust	0	0
npm	npm 5.7.0 之前版本在执行 sudo npm --help 等命令时会随机修改 /etc /usr /boot 等目录的属主权限:	npm/npm#19883	https://www.npmjs.com		earth	270	11	0	Rust,Shell,JavaScript,HTML,CSS	0	0
alibaba	jvm-sandbox: JVM沙箱容器，一种JVM的非侵入式运行期AOP解决方案	https://github.com/alibaba/jvm-sandbox	http://www.alibaba.com	Alibaba Open Source	Hangzhou, China	263	141	0	C,Shell,Java,Kotlin,JavaScript,C++,Dart,TypeScript,Go,Jupyter	0	0
cloudflare	WordPress 页面缓存插件: 1) https://blog.cloudflare.com/improving-html-time-to-first-byte/ 2)	https://github.com/cloudflare/worker-examples/tree/master/examples/edge-cache-html/WordPress%20Plugin	https://www.cloudflare.com		San Francisco, London, Austin, Singapore	245	57	0	C,Shell,Java,Python,JavaScript,Makefile,Lua,Go,PHP,Rust	0	0
rapid7	EternalRomance / EternalChampion aux+exploit modules	rapid7/metasploit-framework#9473	http://www.rapid7.com/		Boston, MA	234	0	0	C,Java,Python,JavaScript,HTML,Go,Ruby	0	0
Dynatrace	superdump - 用于自动化分析崩溃内存转储的工具:	https://github.com/Dynatrace/superdump	http://www.dynatrace.com	Dynatrace	Waltham, Boston	232	25	0	Shell,Java,C#,Ruby,JavaScript,C++,TypeScript,Python,HTML,Puppet,Go,Swift,PowerShell	0	0
PortSwigger	command-injection-attacker - BurpSuite 的命令注入漏洞发现插件:	https://github.com/PortSwigger/command-injection-attacker	https://portswigger.net/		https://portswigger.net/	219	0	0	Python,Kotlin,Ruby,Java,JavaScript	0	0
Yelp	detect-secrets - Yelp 密码探测器,防止源代码中的敏感信息泄露: https://engineeringblog.yelp.com/2018/06/yelps-secret-detector.htmlGitHub:	https://github.com/Yelp/detect-secrets	https://yelp.com/engineering		San Francisco	218	65	1	Java,Scala,Python,Kotlin,JavaScript,Lua,Objective-C,Swift,Puppet,Go,Ruby	0	0
nccgroup	Cisco ASA 实验环境的搭建,来自 NCC Group:	https://github.com/nccgroup/asatools/blob/master/tutorial.md	https://www.nccgroup.trust	Please report all security issues to security at nccgroup dot com	Global	180	15	0	C,Shell,Java,Python,JavaScript,C#,HTML,Elixir,Go,Rust	0	0
dotnet	.NET Core Runtime 最近修复了两个 XML 解析和 X509 证书验证的漏洞(CVE-2018-0764/CVE-2018-0786): dotnet/announcements#51	dotnet/announcements#52	http://www.dotnetfoundation.org	Home of the .NET Foundation	http://www.dotnetfoundation.org	176	381	2	Shell,HTML,C#,Python,F#,Dockerfile,PowerShell	0	0
Netflix	titus:the Netflix container management platform	https://github.com/Netflix/titus	http://netflix.github.io/	Netflix Open Source Platform	Los Gatos, California	152	8	0	Groovy,C,Shell,Java,D,Scala,Python,JavaScript,C++,HTML,Go,Ruby	0	0
OWASP	OWASP iGoat - 用于学习 iOS App 渗透测试和安全性的工具:	https://github.com/OWASP/igoat	http://www.owasp.org	The OWASP Foundation	http://www.owasp.org	151	27	0	C,Shell,Java,Python,JavaScript,Perl,HTML,Go,CSS	0	0
mitre	CALDERA - 自动化网络攻击仿真系统:	https://github.com/mitre/caldera	http://mitre.github.io	Open Source Software from the MITRE Corporation	http://mitre.github.io	145	11	0	Java,Python,JavaScript,R,HCL,Ruby,PowerShell,CSS	0	0
PowerShell	微软对 OpenSSH 的 Win32 移植版本:	https://github.com/PowerShell/Win32-OpenSSH:	https://microsoft.com/powershell	https://microsoft.com/powershell	Redmond	132	23	1	C#,C,TypeScript,PowerShell,C++	0	0
ncsa	ssh-auditor - ssh 弱密码探测工具:	https://github.com/ncsa/ssh-auditor	http://ncsa.illinois.edu	National Center for Supercomputing Applications	Urbana, IL	119	16	0	Shell,Java,Scala,Python,JavaScript,C++,HTML,Puppet,Go,R,Nextflow,Ruby	0	0
darlinghq	darling - 在 Linux 上模拟 macOS 的工具:	https://github.com/darlinghq/darling	http://www.darlinghq.org	macOS translation layer for Linux	http://www.darlinghq.org	118	4	0	C,Roff,Objective-C++,C++,Objective-C,HTML	0	0
salesforce	hassh - 用于识别特定客户端和服务器 SSH 服务的指纹识别工具:	https://github.com/salesforce/hassh	https://opensource.salesforce.com	A variety of vendor agnostic projects which power Salesforce	https://opensource.salesforce.com	118	25	0	Java,Scala,Python,Kotlin,JavaScript,HTML,Jupyter,Ruby,CSS	0	0
QubesOS	Qubes 安全公告:	https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-037-2018.txt	https://www.qubes-os.org/		https://www.qubes-os.org/	116	14	0	C,Shell,Roff,Python,Makefile,Perl,HTML,Ruby,CSS	0	0
shimohq	中国程序员容易发音错误的单词	https://github.com/shimohq/chinese-programmer-wrong-pronunciation	https://shimo.im	💻 A cloud-based productivity suite that combines documents, spreadsheets, slides and more in a simple interface.	China	111	12	0	TypeScript,Java,JavaScript,Perl,Objective-C,Go,CSS	0	0
swisscom	PowerGRR - GRR 事件响应框架的 PowerShell 模块:	https://github.com/swisscom/PowerGRR/wiki/Use-registry-keys-from-Sigma-rules-as-input-for-PowerGRR-registry-flows	https://www.swisscom.com		Switzerland	104	26	0	Groovy,TypeScript,Java,Python,JavaScript,Shell,HTML,Go,Ruby,PowerShell	0	0
gravitational	检测环境是否容易受到 Kubernetes apiserver 漏洞(CVE-2018-1002105)攻击的工具 :	https://github.com/gravitational/cve-2018-1002105	https://gravitational.com/	Tooling for running cloud applications in on-prem environments where compliance matters	Oakland, CA	92	2	0	Shell,Python,JavaScript,TypeScript,HCL,Go,CSS	0	0
trailofbits	ida-evm - Ethereum 虚拟机(EVM)的 IDA 处理器模块:	https://github.com/trailofbits/ida-evm	https://www.trailofbits.com		New York, New York	91	21	0	C,Shell,CMake,Python,C++,Rust,HTML,CSS,Ruby,HCL	0	0
flipkart-incubator	Astra - REST API 安全测试框架:	https://github.com/flipkart-incubator/astra	http://flipkart.com		http://flipkart.com	90	7	0	TypeScript,Java,Python,JavaScript,Objective-C,HTML,Swift	0	0
kennethreitz	Requests-html: Pythonic HTML Parsing for Humans	https://github.com/kennethreitz/requests-html	https://kennethreitz.org/values	I wrote @requests: HTTP for Humans. The only thing I really care about is user experience.	Eden, Earth, Milky Way	88	18	0	Python,Shell,Batchfile,HTML,CSS	0	0
ElevenPaths	ibombshell - 基于 Powershell 实现的后渗透测试工具:	https://github.com/ElevenPaths/ibombshell	https://www.elevenpaths.com/	@Telefonica Group’s global cybersecurity unit.	https://www.elevenpaths.com/	87	6	0	Shell,Java,C#,JavaScript,Python,Objective-C,PHP,Ruby,PowerShell	0	0
coinbase	dexter - 可扩展的取证框架:	https://github.com/coinbase/dexter	https://coinbase.com		https://coinbase.com	86	6	0	TypeScript,Java,HTML,Python,Swift,JavaScript,Shell,Go,PHP,Ruby	0	0
apachecn	Kaggle 项目实战（教程） = 文档 + 代码 + 视频	https://github.com/apachecn/kaggle	http://www.apachecn.org	可能是东半球最大的 AI 社区	China	82	106	2	Shell,Java,Python,JavaScript,HTML,Jupyter,CSS	0	0
tensorflow	Google 用于支持手机和嵌入式平台的深度学习框架 TensorFlow Lite 版预览版发布: https://github.com/tensorflow/tensorflow/tree/r1.5/tensorflow/contrib/lite FaceBook 也有一个类似的轻量级框架 Caffe2Go:	https://github.com/tensorflow/tensorflow/tree/r1.5/tensorflow/contrib/lite	http://www.tensorflow.org		http://www.tensorflow.org	78	213	2	TypeScript,Jupyter,Python,JavaScript,C++,Swift	0	0
cyberark	ketshash - 基于 Windows 事件日志检测 Hash 传递攻击的工具:	https://github.com/cyberark/ketshash	https://www.cyberark.com	CyberArk, the undisputed leader in Privileged Account Security, secures secrets used by machines and users to protect traditional and cloud-native apps.	Newton, MA and Petach Tikva, Israel	76	14	0	Shell,Java,Python,JavaScript,Smarty,HTML,Go,Ruby,PowerShell	0	0
Tencent	bk-cmdb: 蓝鲸智云配置平台(blueking cmdb)	https://github.com/Tencent/bk-cmdb	https://opensource.tencent.com		Shenzhen, China	74	3	0	C,Java,Python,JavaScript,C++,Lua,Objective-C,Go,PHP,CSS	0	0
paragonie	awesome-appsec - 应用安全方向优秀学习资源集合:	https://github.com/paragonie/awesome-appsec	https://paragonie.com	Technology should support your ambitions, not hinder them. We are a team of technology consultants that specialize in application security.	Florida, USA	72	1	0	C,JavaScript,C++,Nginx,HTML,PHP	0	0
baidu	rust-sgx-sdk - 一个为 Rust 编程语言开发英特尔 SGX 应用程序提供的 SDK:	https://github.com/baidu/rust-sgx-sdk	http://www.baidu.com	Baidu Open Source Projects	Beijing, China	71	53	0	GLSL,TypeScript,Java,Python,JavaScript,C++,Go,Jupyter,Rust	0	0
SpiderLabs	social_mapper: A Social Media Enumeration & Correlation Tool	https://github.com/SpiderLabs/social_mapper	https://www.trustwave.com/Resources/SpiderLabs-Blog/		Earth	69	4	0	C,Java,Python,C++,Perl,Lua,PHP,Ruby,C#	0	0
kubernetes	kubernetes 特权提升漏洞详情与缓解措施(CVE-2018-1002105):	kubernetes/kubernetes#71411	https://kubernetes.io	Kubernetes	https://kubernetes.io	68	444	26	Go,Python,Shell,HTML	0	0
MicrosoftEdge	Microsoft 及 Edge 团队发布准备使用 Chromium 开源内核的相关信息:	https://github.com/MicrosoftEdge/MSEdge	None	Microsoft Edge open source projects - demos, tools, data	None	66	258	0	C#,JavaScript,C++,Python,HTML,PowerShell,CSS	0	0
CIRCL	来自 CIRCL 的 GDPR 会议资料:	https://github.com/CIRCL/compliance/tree/master/gdpr/workshop-materials	https://www.circl.lu/		Luxembourg	65	14	0	Python,C,Shell,C++,CSS	0	0
Polidea	SiriusObfuscator - Swift 源代码混淆工具:	https://github.com/Polidea/SiriusObfuscator	http://www.polidea.com		Warsaw	64	3	0	Groovy,Ruby,Java,Python,Kotlin,JavaScript,C++,TypeScript,C#,Objective-C,Shell,CMake,Swift	0	0
NetSPI	SQLInjectionWiki - 记录各种 SQL 注入方法的 Wiki:	https://github.com/NetSPI/SQLInjectionWiki	https://www.netspi.com		Minneapolis, MN	63	7	0	C,ASP,Java,C#,Python,HTML,Go,Ruby,PowerShell	0	0
facebookincubator	BOLT - 一款 Linux 下的二进制代码优化工具:	https://github.com/facebookincubator/BOLT	https://opensource.fb.com	We work hard to contribute our work back to the web, mobile, big data, & infrastructure communities. NB: members must have two-factor auth.	Menlo Park, California	59	14	0	C,TypeScript,Java,Python,JavaScript,C++,Go,PHP,Rust	0	0
nowsecure	node-applesign - 用于重新签名 iOS 应用(IPA 文件) 的 NodeJS 模块:	https://github.com/nowsecure/node-applesign	https://www.nowsecure.com	We secure Mobile Devices, Enterprises, & Mobile Apps	https://www.nowsecure.com	49	5	0	C,Java,Python,JavaScript,Rust,SaltStack,CSS	0	0
CERT-Polska	malwarecage - 用于自动化恶意软件收集/分析系统的组件,由 Python2 编写,支持 REST API:	https://github.com/CERT-Polska/malwarecage	http://www.cert.pl/		Warsaw, Poland	48	5	0	C,Java,Python,JavaScript,C++,PHP	0	0
fireeye	SimplifyGraph - FireEye 开源的一款 IDA Pro 插件,可用于协助生成复杂的控制流程图: https://github.com/fireeye/SimplifyGraph	https://github.com/fireeye/SimplifyGraph	https://www.fireeye.com/blog.html		Milpitas, CA	48	1	0	C,Vue,Python,JavaScript,C++,C#,Go,PowerShell	0	0
dianping	CAT基于Java开发的实时应用监控平台，包括实时应用监控，业务监控	https://github.com/dianping/cat	http://www.dianping.com/	原大众点评技术团队账号，美团点评技术团队账号请访问：https://github.com/Meituan-Dianping	Shanghai, China	47	10	0	C,Java,Scala,C#,JavaScript,Go,Ruby,CSS	0	0
dev-sec	ansible-os-hardening - Ansible 角色提供了许多与安全相关的配置,可以提供了全面的基本保护:	https://github.com/dev-sec/ansible-os-hardening	https://dev-sec.io	Security + DevOps: Automatic Server Hardening	https://twitter.com/devsecio	46	15	0	Puppet,Dockerfile,HTML,Ruby,CSS	0	0
mwrlabs	Safari Wasm Sections POC RCE Exploit(CVE-2018-4121) :	https://github.com/mwrlabs/CVE-2018-4121	http://labs.mwrinfosecurity.com/		Basingstoke, Johannesburg, London, Manchester, Singapore, New York	45	0	0	C,Java,Python,JavaScript,C++,C#,Objective-C,PowerShell,CSS	0	0
silentsignal	silentsignal/av-breaking: Bare Knuckled AV Breaking	https://github.com/silentsignal/av-breaking	https://silentsignal.eu/		Budapest, Hungary	44	0	0	C,Java,Python,Kotlin,C++,Perl,Erlang	0	0
ANSSI-FR	polichombr - 恶意软件协作分析框架:	https://github.com/ANSSI-FR/polichombr	https://www.ssi.gouv.fr		Paris, France	43	0	0	Coq,C,Java,Python,JavaScript,OCaml,C++,Go,Assembly,PowerShell,Rust	0	0
pownjs	pown - Node.js 上的安全测试与漏洞利用框架:	https://github.com/pownjs/pown	https://pownjs.com		https://pownjs.com	43	1	0	Shell,JavaScript	0	0
CTFTraining	A platform to provide challenge for CTFer	https://github.com/CTFTraining	https://CTFTraining.github.io	A platform to provide challenge for CTFer	China	42	0	0	Python,JavaScript,Perl,HTML,PHP,Dockerfile,CSS	0	0
SecWiki	CMS-Hunter :Wordpress <= 4.9.6 任意文件删除漏洞	https://github.com/SecWiki/CMS-Hunter/blob/master/WordPress/Wordpress%20%3C%3D%204.9.6%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E/Wordpress%20%3C%3D%204.9.6%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E.md	http://www.sec-wiki.com		http://www.sec-wiki.com	41	2	0	C,Python,JavaScript,HTML,PHP,CSS	0	0
hardenedlinux	ceph 文件系统模糊测试示例:	https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/tree/master/docs/harbian_qa/fuzz_testing/syz_for_ceph	https://hardenedlinux.github.io/	This is official repository of HardenedLinux community!	Kaer Morhen	38	2	0	C,Shell,Jupyter,Roff,JavaScript,C++,HTML,Assembly	0	0
seemoo-lab	Turning Broadcom Wi-Fi chips into SDRs:	https://github.com/seemoo-lab/mobisys2018_nexmon_software_defined_radio	https://seemoo.de		Darmstadt, Germany	38	5	0	C,Shell,Java,Python,JavaScript,C++,TeX,Objective-C,HTML,MATLAB,Jupyter	0	0
Cisco-Talos	基于 QEMU 的逆向分析沙箱 PyREBox 加入新的漏洞利用检测脚本:	https://github.com/Cisco-Talos/pyrebox/tree/master/exploit_detect	http://www.talosintelligence.com	The official Organizational account of the Talos Group at Cisco	http://www.talosintelligence.com	36	0	0	C,Shell,Python,JavaScript,C++,Lua,HTML,PHP	0	0
bro	bro - 一款网络分析与安全监控框架:	https://github.com/bro/bro	https://github.com/zeek	Mirror of https://github.com/zeek	https://github.com/zeek	36	0	0	Bro,C,CMake,Roff,Python,Ruby,JavaScript,Makefile,C++,Yacc,Dockerfile	0	0
radareorg	cutter: A Qt and C++ GUI for radare2 reverse engineering framework	https://github.com/radareorg/cutter	http://www.radare.org/		http://www.radare.org/	36	7	0	CSS,C,Shell,Python,Makefile,C++,C#,HTML,HCL,Go,Rust	0	0
Genymobile	scrcpy - 在电脑上操控安卓设备的工具,无需 root 权限:	https://github.com/Genymobile/scrcpy/blob/master/README.md	http://www.genymobile.com		Paris, Lyon, San Francisco	34	0	0	Groovy,C,Shell,Java,Python,Makefile,C++	0	0
nsacyber	Windows-Secure-Host-Baseline: Windows 主机安全基线	https://github.com/nsacyber/Windows-Secure-Host-Baseline	https://nsacyber.github.io/	Official GitHub account for NSAs Cybersecurity mission. This site was formerly branded as NSA Information Assurance & Information Assurance Directorate	Fort Meade, MD	32	0	0	YARA,C,Java,C#,JavaScript,Python,HTML,Jupyter,PowerShell	0	0
bugcrowd	HUNT：HUNT Proxy Burp Suite Extension	https://github.com/bugcrowd/HUNT	https://www.bugcrowd.com	A radical cybersecurity advantage.	San Francisco	31	9	0	Shell,Python,JavaScript,Makefile,Elixir,Ruby	0	0
chromium	Chrome 中实现顶级域过滤的源代码,进一步了解顶级域欺骗检测的工作原理及哪些 unicode 字符是危险的:	https://github.com/chromium/chromium/blob/998ff8fbb32cb0fdf1b6bdd9e885d2b1d7c48bbe/components/url_formatter/idn_spoof_checker.cc	https://chromium.org/		Mountain View	31	12	0	TypeScript,Java,Python,JavaScript,C++,C#,HTML,Go	0	0
fox-it	使用 Active Directory 中的 ACL 提升权限: https://blog.fox-it.com/2018/04/26/escalating-privileges-with-acls-in-active-directory/GitHub:	https://github.com/fox-it/Invoke-ACLPwn	https://www.fox-it.com/		https://www.fox-it.com/	31	1	0	C,Shell,Python,Bro,HTML,Ruby,PowerShell	0	0
preempt	MS-RDP 身份验证的远程代码执行漏洞(CVE-2018-0886) POC 放出: Code: https://github.com/preempt/credssp	https://github.com/preempt/credssp	https://www.preempt.com		https://www.preempt.com	30	0	0	C,Java,Python,JavaScript,C++,HTML	0	0
S2E	通过多路径错误注入(Multi-Path Fault Injection)的方法利用 S2E 测试 Windows 驱动中常见的错误恢复代码:	https://github.com/S2E/docs/blob/master/src/Tutorials/WindowsDrivers/FaultInjection.rst#testing-error-recovery-code	http://s2e.systems	A Platform for In-Vivo Analysis of Software Systems	http://s2e.systems	28	6	0	Groovy,C,Shell,Python,Makefile,C++,CSS	0	0
Sentinel-One	The Minimalistic x86/x64 API Hooking Library for Windows:	https://github.com/Sentinel-One/minhook	http://sentinelone.com	Next Generation Endpoint Protection	http://sentinelone.com	28	1	0	C,CMake,Python,JavaScript,C++,C#,Objective-C	0	0
duo-labs	cloudmapper: 生成AWS环境的网络拓扑图	https://github.com/duo-labs/cloudmapper	https://labs.duosecurity.com	Duo Labs is the security research team at Duo Security.	Ann Arbor, MI	28	0	0	TypeScript,Java,Python,JavaScript,Objective-C,Go,CSS	0	0
MindPointGroup	cloudfrunt - 用于识别配置错误的 CloudFront 域名的工具:	https://github.com/MindPointGroup/cloudfrunt	https://www.mindpointgroup.com	We are a cybersecurity consulting firm that supports the public and private sector.	Springfield, VA	27	4	0	Shell,Python,Makefile,JavaScript,VCL,PowerShell	0	0
Security-Onion-Solutions	security-onion - 用于 IDS、NSM 以及日志管理的 Linux 发行版系统:	https://github.com/Security-Onion-Solutions/security-onion	https://securityonionsolutions.com		https://securityonionsolutions.com	27	0	0	Shell,Python,JavaScript,Bro,Tcl,PHP,Dockerfile,CSS	0	0
endgameinc	Ember: An Open Source Classifier And Dataset	https://github.com/endgameinc/ember	https://www.endgame.com		Washington, DC	27	0	0	C,Jupyter,Python,JavaScript,C++,C#,Go,Java,Ruby,Rust	0	0
tenable	RouterOS 漏洞挖掘 :	https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf	http://www.tenable.com/		Columbia, MD	26	4	0	C,Shell,Java,Python,C++,Vim,CoffeeScript,HTML,Emacs,Ruby,PowerShell	0	0
owtf	OWTF - Offensive Web测试框架:	https://github.com/owtf/owtf	http://owtf.org		Pwnageland	25	4	0	Shell,Java,Python,JavaScript,Makefile,HTML,Go	0	0
IOActive	XDiFF - 一款差分模糊测试框架:	https://github.com/IOActive/XDiFF	http://blog.ioactive.com/	IOActive Labs repository	http://blog.ioactive.com/	24	0	0	C,Shell,Java,Python,JavaScript,C++,C#	0	0
comaeio	SwishDbgExt - 事件响应和数字取证调试扩展:	https://github.com/comaeio/SwishDbgExt	http://www.comae.io		Dubai, UAE	24	0	0	C,Java,JavaScript,C++,Nginx,Smarty,PowerShell	0	0
didi	kemon - 用于 macOS 内核监控的开源回调框架:	https://github.com/didi/kemon	https://didi.github.io/	滴滴出行	Beijing, China	24	6	0	C,Vue,Java,Python,Kotlin,JavaScript,C++,HTML,Go,PHP,CSS	0	0
ernw	binninja 的 IPython 插件:	https://github.com/ernw/binja-ipython	https://www.ernw.de/	Official ERNW development channel.	Heidelberg, Germany	24	0	0	C,Shell,Java,XSLT,Python,Erlang	0	0
genuinetools	binctr - 可以由非特权用户运行的静态容器: https://github.com/genuinetools/binctr	https://github.com/genuinetools/binctr	https://genuinetools.org	We are the home of quality software with a focus on simplicity, usability, security and minimalism. No bullshit, no politics, all genuine.	https://genuinetools.org	24	0	0	Go,JavaScript,Makefile,HTML	0	0
airbus-seclab	cpu_rec - 识别任意二进制文件中 cpu 指令的工具:	https://github.com/airbus-seclab/cpu_rec	https://airbus-seclab.github.io/		https://airbus-seclab.github.io/	23	5	0	C,Python,OCaml,C++,Ruby,PowerShell	0	0
android-hacker	VirtualXposed 是基于VirtualApp 和 epic 在非 ROOT 环境下运行 Xposed 模块的实现(支持5.0~8.1):	https://github.com/android-hacker/VirtualXposed/blob/exposed/CHINESE.md	https://vxp.app	A simple app that lets you use Xposed without root, unlock the bootloader, or flash any system images.	https://vxp.app	22	1	0	Kotlin,JavaScript,Java	0	0
teamnsrg	Erays - 用于以太坊智能合约逆向工程的工具:	https://github.com/teamnsrg/erays	https://nsrg.sprai.org		https://nsrg.sprai.org	22	0	0	Go,Python,JavaScript,Shell,Rust	0	0
NVISO-BE	Open-source framework to detect outliers in Elasticsearch events	https://github.com/NVISO-BE/ee-outliers	https://www.nviso.be		Belgium	21	0	0	Python,C,Shell,JavaScript,CSS	0	0
aliasrobotics	RSF 机器人安全框架,对机器人技术进行安全评估的标准化方法: https://aliasrobotics.com/research/rsf.htm	https://github.com/aliasrobotics/RSF	http://aliasrobotics.com	Robot cybersecurity.	Vitoria, Spain	21	0	0	Python,C,JavaScript,C++	0	0
anbox	Anbox - 使用基于容器的方式在 Linux 系统上启动 Android 系统的工具:	https://github.com/anbox/anbox	http://anbox.io	Android in a Box	http://anbox.io	21	1	0	C,Shell,Java,Python,JavaScript,Makefile,C++	0	0
newaetech	chipwhisperer - 用于侧通道功耗分析和 glitching attacks 的开源工具链:	https://github.com/newaetech/chipwhisperer	https://www.newae.com	NewAE Technology Inc. is	https://www.newae.com	21	0	0	Python,C,HTML,C++	0	0
eslint	NPM 模块 eslint-scope 的所有者账户被入侵,攻击者在模块中嵌入了恶意代码以感染该模块的用户:	eslint/eslint-scope#39	https://eslint.org		https://eslint.org	19	25	0	JavaScript	0	0
mushorg	snare: Super Next generation Advanced Reactive honEypot	https://github.com/mushorg/snare	http://mushmush.org		http://mushmush.org	19	6	0	Python,Go,C,PHP	0	0
pnfsoftware	JEB 的 Android JNI 辅助分析插件:	https://github.com/pnfsoftware/jnihelper	https://www.pnfsoftware.com	Sample scripts & plugins for JEB Decompiler - Twitter @jebdec	SF Bay Area	19	3	0	Python,Java	0	0
portcullislabs	linikatz - 在 UNIX 上攻击活动目录的工具:	https://github.com/portcullislabs/linikatz	http://cs.co/portcullislabs	Portcullis Labs is the R&D arm of @ciscos Security Advisory team in EMEAR.	UK, DE, GR, FR, ES, AE	19	0	0	C,XSLT,Python,JavaScript,Perl,HTML,ActionScript	0	0
shieldfy	开发安全的 API 所需要核对的清单	https://github.com/shieldfy/API-Security-Checklist/blob/master/README-zh.md	https://shieldfy.io	Shieldfy Open Source	https://shieldfy.io	19	2	0	PHP,JavaScript,HTML	0	0
InQuest	python-iocextract: Advanced Indicator of Compromise (IOC) extractor	https://github.com/InQuest/python-iocextract	http://www.inquest.net		http://www.inquest.net	18	1	0	Python,AngelScript,C,JavaScript,YARA	0	0
TKCERT	mail-security-tester - 邮件安全测试框架:	https://github.com/TKCERT/mail-security-tester	https://www.thyssenkrupp.com/	Open Source contributions and projects from the thyssenkrupp CERT	https://www.thyssenkrupp.com/	18	2	0	C,Shell,Python,Lua,HTML,Ruby	0	0
evait-security	envizon - 一款为红/蓝团队需求而开发的网络可视化工具:	https://github.com/evait-security/envizon	https://www.evait.de		Germany	18	0	0	C,Shell,Java,Python,Dockerfile,JavaScript,Ruby	0	0
fail0verflow	ShofEL2 - 任天堂 Tegra X1 Boot ROM 的漏洞利用程序和 Linux 加载器 : https://fail0verflow.com/blog/2018/shofel2/GitHub:	https://github.com/fail0verflow/shofel2	https://fail0verflow.com		https://fail0verflow.com	18	2	0	Python,C,Shell,C++	0	0
infobyte	Evilgrade - 专门用来攻击常用软件更新的框架,劫持常用软件的更新信道,替换为指定的二进制文件:	https://github.com/infobyte/evilgrade	https://www.faradaysec.com	Collaborative Penetration Test and Vulnerability Management Platform. We provide specialized services in offensive security.	Miami, FL	18	0	0	Shell,Java,Python,JavaScript,Perl,Erlang,Ruby	0	0
guardicore	Azure_password_harvesting - 从 Azure Windows 虚拟机中提取明文密码的工具:	https://github.com/guardicore/azure_password_harvesting	http://www.guardicore.com		The Internet	17	0	0	C,TypeScript,Java,Python,JavaScript,C++,CoffeeScript,C#	0	0
knownsec	wam: Web App Monitor 应用更新细节监控	https://github.com/knownsec/wam?from=timeline	http://blog.knownsec.com		http://blog.knownsec.com	17	2	0	Python,Go,JavaScript	0	0
lsds	针对 Intel SGX enclave 的 Spectre 漏洞 PoC:	https://github.com/lsds/spectre-attack-sgx	http://lsds.doc.ic.ac.uk/		Department of Computing, Imperial College London	17	2	0	C,Java,Rust,C++	0	0
sqlcollaborative	dbachecks - SQL Server 环境检查工具,可以用这个工具检查数据库备份的有效性: 介绍: http://jesspomfret.com/checking-backups-with-dbachecks/GitHub:	https://github.com/sqlcollaborative/dbachecks	None	For SQL Server Pros to collaborate and make great PowerShell modules for SQL Server. Home of dbatools, dbachecks, dbops and more	None	17	7	0	C#,HTML,PowerShell,SQLPL	0	0
ysrc	yulong-hids: 一款由 YSRC 开发的入侵检测系统	https://github.com/ysrc/yulong-hids	None	前同程安全应急响应中心，项目由离职同事业余时间维护。	None	17	0	0	Java,Python,JavaScript,C++,HTML,Go,PHP	0	0
Coalfire-Research	iOS 11.1.2 (15B202) 越狱 Exploit 代码:	https://github.com/Coalfire-Research/iOS-11.1.2-15B202-Jailbreak	http://www.coalfirelabs.com	Advancing the state of the Infosec industry by providing cutting-edge research, open-source tools and tradecraft	http://www.coalfirelabs.com	16	0	0	C,Python,JavaScript,Lua,PowerShell,HCL	0	0
chaitin	cloudwalker: 开源服务器安全管理平台	https://github.com/chaitin/cloudwalker	http://chaitin.com	长亭科技	Beijing	16	7	0	TypeScript,Python,JavaScript,C++,Lua,HTML,Go	0	0
go-xorm	xorm - Go语言实现的 ORM 库,支持多种数据库:	https://github.com/go-xorm/xorm	http://xorm.io		Shanghai, CN	16	7	0	Go,JavaScript,HTML	0	0
logicalhacking	DVHMA - 一套 Android 漏洞学习、实战环境:	https://github.com/logicalhacking/DVHMA	https://logicalhacking.com	Git mirror of the Software Assurance & Security Research Team at The University of Sheffield. The team is headed by Achim D. Brucker (@adbrucker).	Sheffield, UK	16	1	0	Java,Isabelle,Python,Dockerfile,JavaScript,Standard,Ruby	0	0
nao-sec	starc: Simple high-interactive client honeypot	https://github.com/nao-sec/starc	https://nao-sec.org	Cyber Security Research Team	https://nao-sec.org	16	1	0	Python,C#,PHP,Dockerfile,Vue	0	0
tianocore	UEFI 驱动程序编写手册:	https://github.com/tianocore/tianocore.github.io/wiki/UEFI-Driver-Writers-Guide	http://www.tianocore.org		http://www.tianocore.org	16	21	0	Batchfile,Python,C,HTML,C++	0	0
SECFORCE	sparta - Python GUI 应用,在扫描和枚举阶段协助渗透测试人员快速完成测试:	https://github.com/SECFORCE/sparta	http://www.secforce.com		London, UK	15	0	0	Python,HTML,Ruby	0	0
nettitude	IE 后渗透测试工具 Invoke-PowerThIEf 介绍:	https://github.com/nettitude/Invoke-PowerThIEf/blob/master/Steelcon-2018-com-powerthief-final.pdf	https://labs.nettitude.com		Leamington Spa	15	0	0	C,C#,C++,Python,PHP,Ruby,PowerShell	0	0
outflanknl	Invoke-ADLabDeployer - 自动创建 Hyper-V 虚拟机部署 Windows 域实验环境的 PowerShell 项目: https://outflank.nl/blog/2018/03/30/automated-ad-and-windows-test-lab-deployments-with-invoke-adlabdeployer/GitHub:	https://github.com/outflanknl/Invoke-ADLabDeployer	http://www.outflank.nl	Clear advice with a hacker mindset. Red Teaming - Digital Attack Simulation - Incident Detection and Response	Amsterdam, Netherlands, EU	15	1	0	C,Shell,C#,C++,Python,Visual,PowerShell,CSS	0	0
transmission	BT 下载客户端 Transmission 刚刚修复了一个 DNS Rebinding 远程代码执行漏洞: transmission/transmission#468	transmission/transmission#468	https://transmissionbt.com/	A Fast, Easy, and Free BitTorrent Client	https://transmissionbt.com/	15	6	0	C,HTML,PowerShell,C++,PHP	0	0
JPCERTCC	LogonTracer - 用于可视化分析 Windows 安全事件日志寻找恶意登录的工具:	https://github.com/JPCERTCC/LogonTracer	https://www.jpcert.or.jp/	JPCERT/CCs official repositories maintained by staff and guests	Tokyo, Japan	14	6	0	Python,JavaScript,HTML	0	0
baidu-security	app-env-docker: 基于 Docker 的真实应用测试环境	https://github.com/baidu-security/app-env-docker	https://oases.io/	Just to be awesome :-)	https://oases.io/	14	1	0	Go,JavaScript,Java,HTML,C++	0	0
googleprojectzero	halfempty - 一款快速并行的测试用例最小化工具:	https://github.com/googleprojectzero/halfempty	https://googleprojectzero.blogspot.com	Projects by Google Project Zero	https://googleprojectzero.blogspot.com	14	0	0	C,C#,C++,Python,HTML,Swift	0	0
inversepath	U-Boot 的引导验证 bypass:	https://github.com/inversepath/usbarmory/blob/master/software/secure_boot/Security_Advisory-Ref_IPVR2018-0001.txt	https://inversepath.com	F-Secure Hardware Security Team	Trieste, Italy	14	0	0	C,JavaScript,Makefile,Perl,Verilog,Go,SaltStack,Ruby	0	0
redcanaryco	AtomicRedTeam 项目发布 YAML 规范和验证例程:	https://github.com/redcanaryco/atomic-red-team/blob/master/atomics/spec.yaml	http://www.redcanary.co		http://www.redcanary.co	14	0	0	Python,C#,JavaScript,Ruby,PowerShell	0	0
DefectDojo	django-DefectDojo - 一款开源的漏洞管理平台:	https://github.com/DefectDojo/django-DefectDojo	https://www.defectdojo.org/	Open source vulnerability management and automation.	https://www.defectdojo.org/	13	0	0	Python,Shell,HTML,JavaScript	0	0
SySS-Research	Seth - 对 RDP 服务实施中间人攻击的工具,可从 RDP 连接中提取明文密码:	https://github.com/SySS-Research/Seth	https://www.syss.de/	Open source IT security software tools and information	Tübingen, Germany	13	4	0	Python,C#,Shell,Java,C++	0	0
gy-games	shield: 基于Strom的日志实时流量分析主动防御(CCFirewall)系统	https://github.com/gy-games/shield	http://www.gyyxol.cn	GuangYu Games Open Source	http://www.gyyxol.cn	13	3	0	C#,Python,Shell,Java,JavaScript	0	0
integrity-sa	burpcollaborator-docker - Burp Collaborator 服务的 Docker 容器:	https://github.com/integrity-sa/burpcollaborator-docker	https://labs.integrity.pt		https://labs.integrity.pt	13	0	0	Java,Python,JavaScript,Perl,Objective-C,Ruby	0	0
1Password	1password-teams-open-source - 1Password 为开源项目免费提供 1Password Teams 账户:	https://github.com/1Password/1password-teams-open-source	https://1password.com	1Password remembers all your passwords for you. It keeps your digital life secure and always available, safe behind the one password that only you know.	Toronto, Canada	12	0	0	Go,C,Makefile,Rust,HCL	0	0
EnclaveConsulting	比对文件列表 Hash 判断文件修改情况的 PowerShell 脚本:	https://github.com/EnclaveConsulting/Crypto-PKI/tree/master/Compare-File-Hashes-List	https://sans.org/sec505	SANS Institute SEC505 course author Jason Fossen: Securing Windows and PowerShell Automation	United States	12	0	0	Visual,PowerShell	0	0
HikariObfuscator	Hikari - 一款对 Obfuscator-LLVM 的移植和优化,并提供多种自制的混淆及加固功能的工具 : https://naville.gitbooks.io/hikaricn/content/GitHub:	https://github.com/HikariObfuscator/Hikari	None	Let there be light	/dev/kmem	12	1	0	Python,Logos,Objective-C,Shell,C++	0	0
KasperskyLab	klara: KasperskyLab hunt for new malware using Yara	https://github.com/KasperskyLab/klara?files=1	http://www.kaspersky.com	Kaspersky Lab is the world’s largest privately held vendor of Internet security solutions for businesses and consumers.	http://www.kaspersky.com	12	7	0	C,Shell,Java,Python,C++,PHP	0	0
VerSprite	PureVPN for MacOS 权限提升漏洞披露(CVE-2018-6822):	https://github.com/VerSprite/research/blob/master/advisories/VS-2018-002.md	None		Atlanta, GA	12	0	0	C,Java,Python,JavaScript,HTML,PHP	0	0
theori-io	pwnjs: A Javascript library for browser exploitation	https://github.com/theori-io/pwnjs	http://www.theori.io		Austin, TX	12	1	0	C,Python,JavaScript,Objective-C,HTML,CSS	0	0
Ebryx	AES-Killer - 用于解密移动应用 AES 加密流量的 Burp 插件:	https://github.com/Ebryx/AES-Killer	http://www.ebryx.com	Contributions from Ebryx to the open-source cybersecurity community.	Fremont, USA	11	5	0	Python,YARA,Java	0	0
Hack-with-Github	Free Security and Hacking eBooks	https://github.com/Hack-with-Github/Free-Security-eBooks	https://twitter.com/hackwithgithub	An Open Source Hacking Tools database.	Bangalore, India	11	2	0		0	0
UndeadSec	SocialFish - 与 Ngrok 集成的社工钓鱼工具:	https://github.com/UndeadSec/SocialFish	https://www.youtube.com/c/UndeadSec	Telegram Group: https://t.me/UndeadSec	Brazil	11	6	0	Python,HTML,CSS,Dart	0	0
iqiyi	xHook - 针对 Android 平台 ELF 的 PLT hook 库:	https://github.com/iqiyi/xHook	http://www.iqiyi.com	hosting open source projects in iQIYI, a provider of high-quality video and entertainment services in China	Beijing, China	11	0	0	Go,C,JavaScript,Java	0	0
modzero	interestingFileScanner - 用于扫描敏感文件泄露的 BurpSuite 插件:	https://github.com/modzero/interestingFileScanner	https://www.modzero.ch	Information Security	Winterthur, Switzerland	11	1	0	C,Java,Python,JavaScript,C++,Perl,C#,HTML	0	0
projecthorus	radiosonde_auto_rx - 开源的无线电探空仪(radiosonde)的追踪软件:	https://github.com/projecthorus/radiosonde_auto_rx	http://projecthorus.org/	Project Horus is a Amateur Radio High Altitude Ballooning project based in Adelaide, Australia	http://projecthorus.org/	11	3	0	C,Shell,Java,Python,JavaScript,C++,CSS	0	0
OpenZeppelin	openzeppelin-solidity - 一个开源库,用于在 Ethereum 上编写安全的智能合约:	https://github.com/OpenZeppelin/openzeppelin-solidity	https://openzeppelin.org		https://openzeppelin.org	10	4	0	JavaScript,HTML	0	0
REhints	之前推送过这个议题《Betraying the BIOS》,Intel 第四代 CPU HasWell 新引入的 Intel Boot Guard 保护特性的防护机制与自身的安全性研究。Intel-Boot-Guard 用于确保 BIOS 启动过程中的安全性。作者将最近他关于这个议题的各个会议的演讲 PPT 做了整理:	https://github.com/REhints/Publications/tree/master/Conferences/Betraying%20the%20BIOS	http://REhints.com		http://REhints.com	10	2	0	Python,C,Assembly,CSS,C++	0	0
RhinoSecurityLabs	Aggressor-Scripts - 用于绕过 UAC 限制的 CobaltStrike 脚本:	https://github.com/RhinoSecurityLabs/Aggressor-Scripts/tree/master/UACBypass	https://rhinosecuritylabs.com	A boutique penetration testing and security assessment firm in Seattle, WA.	Seattle, WA	10	0	0	Python,JavaScript,PowerShell,HCL	0	0
archerysec	archerysec: 开源的漏洞扫描和管理平台	https://github.com/archerysec/archerysec	http://archerysec.com	Open Source Project	http://archerysec.com	10	0	0	Python,Shell,JavaScript,HTML	0	0
secureworks	Dalton - IDS规则和PCAP测试系统	https://github.com/secureworks/dalton	https://www.secureworks.com	Together, We Are Collectively Smarter. Exponentially Safer.™ Secureworks is 100% focused on cybersecurity. In fact, it’s all we do.	https://www.secureworks.com	10	0	0	Python,Shell,JavaScript,Ruby	0	0
slowmist	eos-bp-nodes-security-checklist: EOS超级节点安全执行指南	https://github.com/slowmist/eos-bp-nodes-security-checklist	https://slowmist.com	Focusing on Blockchain Ecosystem Security	https://slowmist.com	10	2	0	Go,Ruby	0	0
staticafi	symbiotic - 基于插桩、静态程序切片(static program slicing)及符号执行的程序 Bug 发现工具:	https://github.com/staticafi/symbiotic	mailto:[email protected]	Statica - static analysis group at Faculty of Informatics at Masaryk University in Brno, Czech Republic	Brno, Czech Republic	10	4	0	Python,C,C++	0	0
CERTCC	trommel - 一个自动化的脚本,用来自动化搜索嵌入式设备文件系统中可能有安全问题的文件和信息。:	https://github.com/CERTCC/trommel	https://vuls.cert.org	The CERT Coordination Center is part of the Software Engineering Institute at Carnegie Mellon University.	Pittsburgh, PA	9	0	0	Python,Shell,C++	0	0
DigitalInterruption	cookie-monster - 自动化 Express.js cookie secrets 测试与重签名工具:	https://github.com/DigitalInterruption/cookie-monster	https://www.digitalinterruption.com		UK	9	0	0	PostScript,HTML,JavaScript	0	0
huntresslabs	evading-autoruns	https://github.com/huntresslabs/evading-autoruns	http://huntresslabs.com		United States	9	0	0	Batchfile,Ruby,PowerShell	0	0
nospaceships	raw-socket-sniffer - 不需要驱动程序的 Windows 上的抓包工具:	https://github.com/nospaceships/raw-socket-sniffer	https://nospaceships.com		https://nospaceships.com	9	0	0	C,JavaScript,C++	0	0
sodium-friends	learntocrypto - 通过循序渐进的练习来学习加密:	https://github.com/sodium-friends/learntocrypto	None	Javascript friends of libsodium. Join us at #sodium-friends on Freenode IRC	None	9	2	0	Shell,JavaScript	0	0
GhostPack	From Kekeo to Rubeus,及 Rubeus 工具详细介绍 : https://posts.specterops.io/from-kekeo-to-rubeus-86d2ec501c14Github :	https://github.com/GhostPack/Rubeus	None	A collection of security related toolsets.	None	8	0	0	C#	0	0
Intoli	Exodus - 用于 Linux 系统二进制程序重打包(relocation)的工具,解决将二进制程序拷贝到其他机器上运行时不兼容的问题:	https://github.com/Intoli/exodus	https://intoli.com		https://intoli.com	8	1	0	Python,C#,JavaScript	0	0
Xipiter	IoTInfographic	https://github.com/Xipiter/IoTInfographic	http://senr.io	SenrioLabs (formerly Xipiter)	http://senr.io	8	0	0	Python	0	0
corkami	图像 MD5 碰撞研究:	https://github.com/corkami/pocs/blob/master/collisions/README.md	None	Reverse engineering & visual documentation	None	8	2	0	TeX,Python,HTML,Assembly	0	0
dtag-dev-sec	t-pot-autoinstall: Autoinstall T-Pot on Ubuntu 16.04	https://github.com/dtag-dev-sec/t-pot-autoinstall	None	Telekom Security on GitHub, home of T-Pot, PEBA, Explo and more.	None	8	2	0	Python,C,Shell,HTML	0	0
eset	malware-ioc: Indicators of Compromises (IOC) of eset	https://github.com/eset/malware-ioc	https://eset.com/		https://eset.com/	8	4	0	Python,YARA,HTML,JavaScript	0	0
landscapeio	prospector - 类似 Pylint 的 Python 代码分析工具:	https://github.com/landscapeio/prospector	https://landscape.io		https://landscape.io	8	2	0	Python,Java	0	0
twelvesec	Gasmask - 开源情报信息收集工具:	https://github.com/twelvesec/gasmask	https://www.twelvesec.com	TwelveSec is an information security firm, specialising in assurance, security management, and InfoSec training services	Athens, Greece	8	6	0	Python,C,Java,C++	0	0
x41sec	x41-smartcard-fuzzing - 智能卡驱动 Fuzzing 工具:	https://github.com/x41sec/x41-smartcard-fuzzing	https://www.x41-dsec.de		https://www.x41-dsec.de	8	0	0	C#,C,Java	0	0
CSecGroup	Wafid: WAF指纹识别工具	https://github.com/CSecGroup/wafid	https://csecgroup.github.io/	专注代码安全审计、漏洞检测及安全修复方案研究	beijing	7	0	0	Python,C,HTML,Java	0	0
NextronSystems	工具介绍之 HELK vs APTSimulator:HELK 是 Elasticsearch、Logstash、Kibana 三个的组合,基于日志分析检测攻击。APTSimulator 是个模拟被渗透系统环境的工具:1): https://github.com/NextronSystems/APTSimulator 2): https://github.com/Cyb3rWard0g/HELK3):	https://github.com/NextronSystems/APTSimulator	https://www.nextron-systems.com/	We Detect Hackers	Frankfurt, Germany	7	0	0	Go,Python,Batchfile	0	0
SideChannelMarvels	Deadpool - 收集公开的白盒加密算法实现及对应攻击方法的仓库:	https://github.com/SideChannelMarvels/Deadpool	None	SCA-related projects	None	7	0	0	Python,C,Shell,C++	0	0
UnkL4b	GitBackdorizer - 通过修改 git 仓库的 hook 文件钓取用户 git 凭证的工具:	https://github.com/UnkL4b/GitBackdorizer	http://unkl4b.github.io		http://unkl4b.github.io	7	0	0	Python,Shell,JavaScript,HTML	0	0
capsule8	通过监测 Last-Level Cache 的使用检测 Meltdown 和 Spectre 漏洞攻击的工具,来自 Capsule8 团队: https://capsule8.com/blog/detecting-meltdown-spectre-detecting-cache-side-channels/	https://github.com/capsule8/capsule8/blob/master/examples/cache-side-channel/main.go	https://capsule8.com	Container-Aware Real-time Threat Protection for Linux	Brooklyn, NY	7	5	0	Go,Python,TypeScript,Smarty	0	0
eurecom-s3	linux_screenshot_xwindows - 从内存转储中提取所有打开的 Xwindows 的屏幕截图:	https://github.com/eurecom-s3/linux_screenshot_xwindows	http://s3.eurecom.fr	Stand-alone projects developed by eurecom-s3. Make sure to also visit https://github.com/avatarone and https://github.com/avatartwo	http://s3.eurecom.fr	7	1	0	Python,C,Assembly,C++	0	0
mindedsecurity	基于 AST 和部分执行的方法实现 JavaScript 反混淆: http://blog.mindedsecurity.com/2015/10/advanced-js-deobfuscation-via-ast-and.html	https://github.com/mindedsecurity/JStillery	http://www.mindedsecurity.com		Italy, UK	7	0	0	Shell,JavaScript,HTML,CSS	0	0
housepower	olap2018: 易观第二届OLAP漏斗算法大赛	https://github.com/housepower/olap2018	None	Power your ClickHouse	None	6	0	0	Go,HTML,Java,C++	0	0
llir	LLVM IR 汇编的 EBNF 语法 :	https://github.com/llir/grammar	None	Unofficial libraries for interacting with LLVM IR.	None	6	2	0	Go,Tcl,LLVM	0	0
DynamoRIO	drmemory - 支持多平台的内存调试器:	https://github.com/DynamoRIO/drmemory	http://dynamorio.org	Dynamic Instrumentation Tool Platform	http://dynamorio.org	5	0	0	C,C++,CSS	0	0
PAGalaxyLab	路由器漏洞分析集合（PAGalaxyLab ）	https://github.com/PAGalaxyLab/VulInfo	http://galaxylab.org/		http://galaxylab.org/	5	0	0	Python,C,Java	0	0
phishai	phish-protect - 用于防御域名同形词攻击的 Chrome 插件:	https://github.com/phishai/phish-protect	https://www.phish.ai	making phishing a problem of the past	Tel-Aviv, Israel	5	0	0	Python,JavaScript	0	0
susers	Writeups: 国内各大CTF赛题及writeup整理	https://github.com/susers/Writeups	https://susers.github.io	东南大学网络安全联盟	Nanjing, China	5	1	0	Python,PHP,HTML	0	0
wifiphisher	wifiphisher - 自动化 WiFi 钓鱼工具:	https://github.com/wifiphisher/wifiphisher	https://wifiphisher.org		https://wifiphisher.org	5	2	0	Python,C,HTML	0	0
Malshare	MalShare-Toolkit - 与 Malshare 进行交互的一系列工具集合:	https://github.com/Malshare/MalShare-Toolkit	http://www.MalShare.com	Collaborative, community driven public malware repository	http://www.MalShare.com	4	1	0	C#,Python	0	0
NaoTu	DesktopNaotu: 桌面版脑图（百度脑图离线版，思维导图工具）	https://github.com/NaoTu/DesktopNaotu	mailto:[email protected]	桌面版脑图（百度脑图离线版，思维导图工具）开箱即用，跨平台支持 Windows/Linux/Mac OS	China	4	1	0	TypeScript,JavaScript	0	0
PreOS-Security	awesome-firmware-security - 优秀的固件安全方向资源收集:	https://github.com/PreOS-Security/awesome-firmware-security	https://preossec.com		Seattle, WA	4	1	0	Python	0	0
code-tutorials	assembly-intro - x86 汇编语言简介系列视频教程的示例代码: https://github.com/code-tutorials/assembly-introVideo:	https://github.com/code-tutorials/assembly-introVideo:	https://www.youtube.com/channel/UC6tqFmkqznYJTzidBerHA8g/playlists	Learn to code by building things	https://www.youtube.com/channel/UC6tqFmkqznYJTzidBerHA8g/playlists	4	1	0	Python,Go,Assembly	0	0
nullsecuritynet	dnsspider - 快速子域名收集工具:	https://github.com/nullsecuritynet/tools/tree/master/scanner/dnsspider	http://www.nullsecurity.net/	From 0x00 till dawn!	In your systems memory	4	0	0	Python,HTML	0	0
psconfeu	使用 JEA 保护基础设施(PSCONF.EU 2018):	https://github.com/psconfeu/2018/blob/master/Miriam%20Wiesner/SecuringYourInfrastructureWithJEA/SecuringYourInfrastructureWithJea.pdf	http://www.psconf.eu	PowerShell Conference Europe	http://www.psconf.eu	4	4	0	PowerShell	0	0
Antid0teCom	Apple Smart Keyboard 和 Apple Pencil 的安全研究研究:	https://github.com/Antid0teCom/ipad_accessory_research	https://www.antid0te.com		https://www.antid0te.com	3	0	0	Python,C++	0	0
MiSecurity	x-patrol: github泄露扫描系统	https://github.com/MiSecurity/x-patrol	None		Beijing, China	3	0	0	Go	0	0
ZipArchive	盘古实验室发现 ZipperDown 漏洞,约 10 %的 iOS 应用可能受影响,可造成应用数据破坏,一定条件下可任意执行代码: https://zipperdown.org/	ZipArchive/ZipArchive#453	https://github.com/ziparchive		San Francisco, California	3	2	0	C	0	0
intelxed	xed - x86 encoder decoder:	https://github.com/intelxed/xed	https://intelxed.github.io/		Massachusetts	3	1	0	Python,HTML	0	0
openexr	HDR 图像格式的开源实现 OpenEXR 被发现越界写漏洞(Imf_2_2::copyIntoFrameBuffer):	AcademySoftwareFoundation/openexr#262	http://openexr.org/		http://openexr.org/	3	4	0	C++	0	0
privacyradius	gdpr-checklist: The GDPR Checklist Project	https://github.com/privacyradius/gdpr-checklist	https://www.privacyradius.com/	Privacy x Security	https://www.privacyradius.com/	3	0	0	JavaScript	0	0
redhuntlabs	RedHunt-OS - 用于攻击者模拟和威胁追踪的虚拟机:	https://github.com/redhuntlabs/RedHunt-OS	http://redhuntlabs.com/	Discover and Assess your Attack Surface	http://redhuntlabs.com/	3	2	0	Python	0	0
NASA-SW-VnV	IKOS - 一款基于 Abstract Interpretation 理论的 C/C++ 静态分析器 :	https://github.com/NASA-SW-VnV/ikos	https://ti.arc.nasa.gov/tech/rse/	NASA - Software Verification and Validation	NASA Ames Research Center, CA	2	3	0	Ruby,C++	0	0
NetSecLab	Paper_for_Digital_Forensics: 数字取证相关的论文(摄像头特征)	https://github.com/NetSecLab/Paper_for_Digital_Forensics	http://seclab.hdu.edu.cn/	Internet and Network Security Laboratory	Hangzhou, China	2	2	0	Java	0	0
TeamWalrus	Walrus - 用于在手机上调用门禁卡克隆设备的 Android 应用:	https://github.com/TeamWalrus/Walrus	https://walrus.app/		https://walrus.app/	2	2	0	C,Java	0	0
bugbountyforum	XSS-Radar - 用于快速 XSS Fuzz 测试的工具,当前仅支持 Chrome 浏览器扩展版本:	https://github.com/bugbountyforum/XSS-Radar	https://bugbountyforum.com/		https://bugbountyforum.com/	2	0	0	JavaScript	0	0
pumasecurity	puma-scan - 实时进行源代码安全性扫描分析的 Visual Studio 扩展:	https://github.com/pumasecurity/puma-scan	https://www.pumascan.com/		West Des Moines, IA	2	2	0	C#,JavaScript	0	0
securego	gosec: Golang security checker	https://github.com/securego/gosec?from=timeline	None	Project devoted to secure programming in the Go language	None	2	1	0	Go,JavaScript	0	0
tearsecurity	firstorder - 用于使 Empire C2 通信逃避基于异常检测的 IDS 系统的工具工具:	https://github.com/tearsecurity/firstorder	https://tearsecurity.com/		https://tearsecurity.com/	2	1	0	Python	0	0
threat9	routersploit - 嵌入式设备漏洞利用框架:	https://github.com/threat9/routersploit	https://www.threat9.com		https://www.threat9.com	2	0	0	Python	0	0
360-A-Team	EventCleaner: 日志擦除工具	https://github.com/360-A-Team/EventCleaner	None	360 A-TEAM has been renamed to QAX A-TEAM, check out https://github.com/QAX-A-Team	None	1	0	0		0	0
AndroidHardening	hardened_malloc - 对 Android 提供多种安全功能的内存管理器:	https://github.com/AndroidHardening/hardened_malloc	https://grapheneos.org/	Renamed to GrapheneOS. This name is kept to prevent anyone from taking the name and breaking the redirects, like what happened with the previous organization.	Toronto, Ontario, Canada	1	1	0		0	0
FluxionNetwork	fluxion - 无线网络钓鱼攻击工具:	https://github.com/FluxionNetwork/fluxion	http://github.com/FluxionNetwork	Offical repository for fluxion	http://github.com/FluxionNetwork	1	2	0	HTML	0	0
IDArlingTeam	IDArling - IDA Pro 和 Hex-Rays 的协同逆向插件,允许将多个 IDA Pro 的实例连接在一起,同时同步多个用户对数据库所做的修改:	https://github.com/IDArlingTeam/IDArling/	None	The authors of IDArling	None	1	1	0	Python	0	0
Synacktiv	可以在 IDA 中加载 iOS 12 kernelcaches 和 PAC 代码的脚本:	https://github.com/Synacktiv/kernelcache-laundering	http://www.synacktiv.ninja/en/		Paris - France	1	2	0	Python	0	0
akaxincom	openzaly:私有聊天服务器源代码	https://github.com/akaxincom/openzaly	https://www.akaxin.com	Akaxin 是一款开源免费的私有聊天软件，用以搭建自己的聊天服务器，供自己与朋友、用户使用。	Beijing, China	1	0	0	PHP	0	0
phoenhex	iOS 11.3.1 的 Safari 漏洞利用程序发布,通过两个已知漏洞获得 WebContent 沙箱的 tfp0 ( CVE-2018-4233、CVE-2018-4243):	https://github.com/phoenhex/files/tree/master/exploits/ios-11.3.1	https://phoenhex.re/	providing fine exploits & writeups to the world	your kernel	1	0	0	C	0	0
sense-of-security	ADRecon - 用于收集有关 Active Directory信息的工具,并生成 AD 环境当前状态的整体报告:	https://github.com/sense-of-security/adrecon	http://www.senseofsecurity.com.au/	IT Security and Risk Managment Experts. The leading independent provider of IT security and risk management solutions in Australia.	Sydney and Melbourne, Australia	1	0	0	HTML	0	0
yunjiweidian	TITAN: 云集分布式全链路压测军演系统	https://github.com/yunjiweidian/TITAN	mailto:[email protected]		[email protected]	1	0	0	Java	0	0
rrrfff	AndHook - 一个轻量级的 Android hook 框架:	https://github.com/rrrfff/AndHook	https://github.com/Rprop/		https://github.com/Rprop/	0	0	0		0	0
samdenty99	injectify - 类似于 BeFF 的网站中间人攻击工具:	https://github.com/samdenty99/injectify	https://github.com/samdenty	Moved here -> https://github.com/samdenty	https://github.com/samdenty	0	0	0		0	0

私人github账号 推荐

github_id	title	url	p_url	p_profile	p_loc	p_company	p_repositories	p_projects	p_stars	p_followers	p_following	repo_lang	repo_star	repo_forks
samyk	frisky - 针对 ios/macOS 应用的嗅探/修改/逆向/注入等工具:	https://github.com/samyk/frisky	https://samy.pl	explo(r,it)ing boundaries	los angeles	None	83	0	8700	5200	903	Eagle,C,JavaScript,Arduino	5000	953
davidfowl	MutliProtocolAspNetCore - 使用 ASP.NET Core 和 Kestrel 实现的多协议服务器:	https://github.com/davidfowl/MultiProtocolAspNetCore	http://davidfowl.com/	Partner Software Architect at Microsoft on the ASP.NET team, Creator of SignalR	Bellevue, WA	Microsoft	146	0	63	3900	8	C#	1500	143
evilsocket	bettercap-ng - bettercap 的重新实现 :	https://github.com/evilsocket/bettercap-ng#cross-compiling	https://www.evilsocket.net	Hacker , I dont respectfully, I disagree. https://www.patreon.com/evilsocket	Italy	Zimperium	115	0	15	3700	0	Go,Python,JavaScript	0	0
yangyangwithgnu	暴破助攻提权：ruadmin	https://github.com/yangyangwithgnu/ruadmin	https://yangyangwithgnu.github.io/	The quieter you become, the more you are able to hear.	chengdu	None	15	0	2	3300	0	Python,C,CSS,C++,Vim	9000	2100
trustedsec	A tool for automating cracking methodologies through Hashcat from the TrustedSec	https://github.com/trustedsec/hate_crack	https://www.trustedsec.com	Headquartered in Cleveland, Ohio, TrustedSec is an Information Security Consulting company, made up of researchers, hackers, advisors to help our customers.	Cleveland, Ohio	TrustedSec	24	0	2	3100	8	Python	4400	1400
TrustedSec	hate_crack - TrustedSec 团队发布的 Hashcat 自动化破解工具:	https://github.com/TrustedSec/hate_crack	https://www.trustedsec.com	Headquartered in Cleveland, Ohio, TrustedSec is an Information Security Consulting company, made up of researchers, hackers, advisors to help our customers.	Cleveland, Ohio	TrustedSec	24	0	2	3100	8	Python	4400	1400
trekhleb	homemade-machine-learning: 机器学习入门资料	https://github.com/trekhleb/homemade-machine-learning	https://github.com/epam	Lead Software Engineer at @epam. Creating full-stack web-mobile projects. Interesting in machine learning.	Lviv, Ukraine	None	9	0	59	3000	9	Python,TypeScript,JavaScript,Jupyter,MATLAB	0	0
xoreaxeaxeax	rosenbridge - x86 CPU 硬件后门项目:	https://github.com/xoreaxeaxeax/rosenbridge	None		None	None	9	0	0	2900	0	Python,C,Assembly	0	0
dominictarr	每周下载量达 200W 的 NPM 软件包 event-stream 被插入恶意代码 :	dominictarr/event-stream#116	http://protozoa.nz	antipodean wandering albatross	New Zealand	Protozoa	880	0	358	2900	28	JavaScript	0	0
migueldeicaza	gui.cs - 用于 .NET 控制台应用程序的用户界面工具包:	https://github.com/migueldeicaza/gui.cs	http://tirania.org/blog		Boston, MA.	Microsoft	111	0	263	2800	43	C#,JavaScript	2600	477
byt3bl33d3r	DeathStar - 调用 Empire RESTful API 自动化获取域管权限的 Python 脚本发布:	https://github.com/byt3bl33d3r/DeathStar	https://byt3bl33d3r.github.io	C Y B E R	Error: Unable to resolve	BlackHills InfoSec	96	0	953	2700	117	Python,PowerShell,HCL	0	0
FiloSottile	mkcert - 制作本地信任证书的工具:	https://github.com/FiloSottile/mkcert	https://github.com/google	Cryptogopher. RC F13, F217.	NYC	@google, Go team	55	0	891	2700	30	Go,Ruby	0	0
x0rz	tweets_analyzer - 用于推文(Tweets)的元数据收集与活动分析工具:	https://github.com/x0rz/tweets_analyzer	https://0day.rocks	hacking things	France	None	6	0	19	2600	0	Python,C,Perl	3500	2100
s0md3v	Hash-Buster: 集成多API的hash查询工具	https://github.com/s0md3v/Hash-Buster	https://github.com/s0md3v	I make things, I break things and I make things that break things. Twitter: @s0md3v	None	None	30	0	0	2400	0	Python,JavaScript,Perl	0	0
jackfrued	jackfrued/Python-100-Days: Python	https://github.com/jackfrued/Python-100-Days	http://blog.csdn.net/jackfrued	只有非常努力，才能看起来毫不费力！	Chengdu Sichuan, China	http://www.qfedu.com	48	0	210	2200	1	Python,Shell,Jupyter,JavaScript	31600	11000
zhengmin1989	Fasten your seatbelts: we are escaping iOS 11 sandbox,来自 DEFCON 26:	https://github.com/zhengmin1989/MyArticles/blob/master/PPT/DEFCON-26-Min-Spark-Zheng-iOS-11-SBE.pdf	None	Android/iOS Senior Security Engineer @ Alibaba, CUHK PhD, a member of Blue-lotus and Insight-labs, worked in FireEye , Baidu and Tencent.	None	None	22	0	39	2000	6	Objective-C,HTML,Makefile	0	0
thelinuxchoice	blackeye - 整合了32个网站模板的钓鱼工具:	https://github.com/thelinuxchoice/blackeye	http://twitter.com/linux_choice	Twitter: @linux_choice	None	None	103	0	38	1900	5	Python,Shell,HTML	0	0
DanMcInerney	icebreaker - 在内网环境下自动化攻击活动目录的工具:	https://github.com/DanMcInerney/icebreaker	None	I like automating security stuff so I dont have to work. Coalfire Sr. Pentester.	None	@danhmcinerney	82	0	236	1900	23	Python,Ruby,PowerShell	0	0
spacehuhn	Deauth All Button,可以一键断开所有设备WiFi连接的小工具(Video): https://www.youtube.com/watch?v=HWZrBoIKacw&feature=youtu.beGitHub:	https://github.com/spacehuhn/esp8266_deauther	https://spacehuhn.com	Support me on patreon.com/spacehuhn	Germany	None	18	0	260	1800	12	C,C++,Arduino	0	0
jedisct1	dnscrypt-proxy - 一款 DNS 代理,支持加密的 DNS 协议:	https://github.com/jedisct1/dnscrypt-proxy	http://prettysimpleimages.com	Parisian fashion photographer with a knack for math, computer vision, opensource software and infosec.	Paris, France	None	257	0	2000	1700	96	Go,C,C++,Rust	0	0
LiveOverflow	PwnAdventure3 - 一款易受攻击的 MMORPG 游戏,目的在于提升游戏开发人员的安全编码能力:	https://github.com/LiveOverflow/PwnAdventure3/	https://www.youtube.com/LiveOverflowCTF	wannabe hacker...	None	None	10	0	3	1700	0	Python,C,HTML,C++	324	98
hasherezade	hollows_hunter - 用于扫描进程注入中的傀儡 PE 模块的工具:	https://github.com/hasherezade/hollows_hunter	http://hasherezade.net		Poland	None	48	0	30	1600	9	Python,C,Assembly,C++	746	129
hfiref0x	Stryker - CPU-Z CVE-2017-15303 漏洞的利用工具,基于该漏洞,这个工具实现 DSE 特性的开关控制、受保护进程劫持、Driver loader:	https://github.com/hfiref0x/Stryker	None		None	None	23	0	24	1500	15	C	0	0
gentilkiwi	Mimikatz 新版本发布,支持 Windows 10 1803 绕过 Credential Guard:	https://github.com/gentilkiwi/mimikatz/releases	http://blog.gentilkiwi.com		France	None	11	0	18	1500	24	C	7700	1800
JonathanSalwan	ROPgadget - 支持多种 CPU 架构的 ROP 利用辅助工具:	https://github.com/JonathanSalwan/ROPgadget	http://twitter.com/JonathanSalwan	Security researcher working on program analysis and software verification methods	France - Arzon	Quarkslab	9	0	0	1500	0	Python,LLVM,Makefile,C++	1900	405
FeeiCN	FeeiCN/GSIL: Github Sensitive Information Leakage（Github敏感信息泄露）	https://github.com/FeeiCN/GSIL	https://github.com/alibaba	Security Researcher(专注自动化漏洞发现和入侵检测防御)	Hangzhou, China	@alibaba	12	0	889	1500	72	Python	0	0
stamparm	maltrail - 恶意流量检测系统:	https://github.com/stamparm/maltrail	https://twitter.com/stamparm/	74 -> EB	Zagreb, Croatia	None	19	0	148	1400	15	Python	0	0
pwn20wndstuff	iOS-Apfs-Persistence-Exploit - iOS APFS 持久化漏洞利用程序: https://github.com/pwn20wndstuff/iOS-Apfs-Persistence-Exploit writeup:	https://github.com/pwn20wndstuff/iOS-Apfs-Persistence-Exploit	https://twitter.com/Pwn20wnd	Hacker.	None	None	54	0	30	1400	3	C,Makefile,Objective-C	0	0
Screetsec	Vegile - Linux 后渗透测试工具,用于安装持久化后门:	https://github.com/Screetsec/Vegile	http://dracos-linux.org	Developer dracOs linux and Penetration Testing Tools , Join our community at https://t.me/bashidorg	INDONESIA	Dracos Linux ( Penetration OS from Indonesia )	14	0	148	1400	5	Python,Shell,Java,C++	0	0
1N3	PRISM-AP: An automated Wireless RogueAP MITM attack framework	https://github.com/1N3/PRISM-AP	https://github.com/xer0dayz	Founder of @XeroSecurity. Creator of Sn1per. Hacking since 93. 20+ yrs. IT exp. Sr. Penetration Tester. OSCE/OSCP/CISSP @xer0dayz @XeroSecurity @CrowdShield	None	XeroSecurity	19	0	671	1400	35	Python,C,Shell,BitBake	0	0
trimstray	multitor - 通过 HAProxy 创建多个 TOR 实例并实现负载均衡的工具:	https://github.com/trimstray/multitor	https://trimstray.github.io/	BIO_read(wbio, buf, 4096)	Poland	None	15	0	892	1300	265	Shell,HTML	0	0
riusksk	secbook: 信息安全从业者书单推荐	https://github.com/riusksk/secbook	http://riusksk.me	《漏洞战争》作者	China	Tencent	174	0	790	1300	1000	Python,Objective-C,BlitzBasic,ActionScript	952	148
radare	IDA 项目文件转 radare2 的脚本发布:	https://github.com/radare/radare2ida/blob/master/ida2r2/ida2r2.py	http://www.radare.org/		None	Radare	139	0	115	1200	24	TeX,Python,C,JavaScript	10300	1900
l3m0n	linux_information: 自动化收集linux信息	https://github.com/l3m0n/linux_information	http://www.cnblogs.com/iamstudy	biubiubiubiu	None	Syclover	98	0	1000	1200	76	C,Python,JavaScript,HTML,Go,PHP	0	0
fatedier	frp:可用于内网穿透的高性能的反向代理应用	https://github.com/fatedier/frp/blob/master/README_zh.md	https://blog.fatedier.com	To be yourself.	SH,China	None	39	0	301	1200	9	Go	0	0
dylanaraps	pure-bash-bible - 通过 bash 实现其他常用功能的方式收集:	https://github.com/dylanaraps/pure-bash-bible	None		no	None	64	0	290	1200	0	Python,C,Shell	0	0
Neo23x0	APTSimulator - 一个批处理脚本,快速将 Windows 系统改造成被 APT 入侵过的环境,用于安全产品测试等需求:	https://github.com/Neo23x0/APTSimulator	https://github.com/NextronSystems	#DFIR #Python #YARA #Golang #SIEM #SOC #Sigma #Malware	None	@NextronSystems	79	0	101	1200	15	Python,Batchfile,Java	0	0
3gstudent	Eventlogedit-evtx--Evolution - 从 Windows EVTX 事件日志针对性删除工具:	https://github.com/3gstudent/Eventlogedit-evtx--Evolution	https://3gstudent.github.io/	good in study,attitude and health	None	None	99	0	159	1200	11	Python,C#,Batchfile,PowerShell,C++	431	158
philipperemy	tensorflow-1.4-billion-password-analysis - 使用深度学习和NLP分析14亿明文密码:	https://github.com/philipperemy/tensorflow-1.4-billion-password-analysis	https://github.com/cogentlabs	From Paris to Tokyo via London. Research Engineer @cogentlabs. Maths, Stats, Machine Learning. 🏄 🎲 🎱	Tokyo, JP	Imperial College London	93	0	341	1100	7	Python,Jupyter	0	0
janishar	MIT 的《深度学习》电子书:	https://github.com/janishar/mit-deep-learning-book-pdf	https://mindorks.com/	Co-Founder Mindorks , Android & Full Stack Developer , UI/UX Designer , Writer , Philosopher , Open Source Contributor	Gurgaon, India	Mindorks	14	0	57	1100	6	Java	0	0
gdbinit	LLDBINIT - LLDB 调试器的个性化初始化配置脚本:	https://github.com/gdbinit/lldbinit/	https://reverse.put.as	I break Macs!	None	None	67	0	187	1100	23	C,C++	1200	343
danistefanovic	build-your-own-x - Build your own 系列,各种环境的构建技术集合:	https://github.com/danistefanovic/build-your-own-x	http://twitter.com/danistefanovic	Bad at writing bios.	St. Gallen, Switzerland	None	11	0	94	1100	2	JavaScript,Scala	0	0
cure53	CNY Challenge 2018 Write-Up	https://github.com/cure53/XSSChallengeWiki/wiki/CNY-Challenge-2018	https://cure53.de	And there is fire where we walk.	Berlin	Fine penetration tests for fine websites	16	0	30	1100	0	JavaScript,HTML	0	0
coolstar	Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake :	https://github.com/coolstar/electra	None	iOS developer and computer science student at UC Santa Barbara.	San Francisco, CA	None	115	0	8	1100	1	C,C++	774	217
HarmJ0y	DAMP - 通过修改主机安全描述符实现在域内持久化控制的项目:	https://github.com/HarmJ0y/DAMP	http://blog.harmj0y.net	Co-founder of Empire, BloodHound, and the Veil-Framework , PowerSploit developer , krb lover , Microsoft PowerShell MVP , Security at the misfortune of others	Seattle, WA	None	31	0	26	1100	4	C#,Python,PowerShell	593	134
hdm	mac-ages - MAC 地址年龄跟踪项目,通过 MAC 地址寻找硬件的近似发布日期:	https://github.com/hdm/mac-ages	https://hdm.io/	Security researcher, startup advisor, product developer, consultant.	Austin, TX	None	36	0	0	1000	1	Go,JavaScript,Ruby	0	0
DennisYurichev	使用 Z3 求解器自动确定在汇编器中使用长跳转抑或短跳转:	https://github.com/DennisYurichev/random_notes/blob/master/Z3/assembler_and_JMPs.py	http://www.yurichev.com		None	None	30	0	57	972	72	TeX,C,Mathematica	0	0
r00t-3xp10it	FakeImageExploiter - 伪造图片实现漏洞利用的工具:	https://github.com/r00t-3xp10it/FakeImageExploiter	https://github.com/Suspicious-Shell-Activity	Be a hacker not a criminal... Pentester , IT enthusiastic , blooger	Lisbon - portugal	@Suspicious-Shell-Activity	27	0	30	970	37	C#,Shell,HTML,Ruby	0	0
mattifestation	BCD - 交互式修改本地或远程的引导配置数据(BCD)的 PowerShell 模块:	https://github.com/mattifestation/BCD	http://www.exploit-monday.com/		None	None	23	0	9	953	1	PowerShell	553	146
FuzzySecurity	Windows 系统 Token 信息收集 PowerShell 脚本:	https://github.com/FuzzySecurity/PowerShell-Suite/blob/master/Get-OSTokenInformation.ps1	http://www.fuzzysecurity.com/		None	None	13	0	0	952	0	C,PowerShell	0	0
NullArray	AutoSploit - 从 Shodan.io 收集信息并自动化地大规模攻击远程主机的工具:	https://github.com/NullArray/AutoSploit	https://github.com/GreySec-Official	Cyber security enthusiast. Freedom advocate. I believe in sharing knowledge, tools, and value open source software development.	None	@GreySec-Official	34	0	204	933	164	Python,Shell	0	0
D4Vinci	Cr3dOv3r - 根据邮箱自动搜索泄漏的密码信息,也可测试账户密码在各大网站能否登录的工具:	https://github.com/D4Vinci/Cr3dOv3r	https://github.com/Seekurity	A hacker, high&low-level coder and a lot of things between. An extremely curious creature loves to learn. Break things or make things that break things.	Egypt	@Seekurity and @iSecur1ty	32	0	367	927	82	Python	0	0
txthinking	brook - Go 语言编写的一款跨平台代理应用:	https://github.com/txthinking/brook	https://www.txthinking.com	Keep it simple, stupid	The Mars	None	24	0	174	926	0	Go,Shell,JavaScript,HTML	8700	1700
Ridter	Mailget: 通过脉脉用户猜测企业邮箱	https://github.com/Ridter/Mailget	https://evi1cg.me		None	None	104	0	405	909	20	Python,C#,C	1800	358
mattgodbolt	compiler-explorer - 在 Web浏览器上交互方式运行的编译器:	https://github.com/mattgodbolt/compiler-explorer	https://xania.org/	Husband, father, Compiler Explorer and jsbeeb creator, ex-Google, ex-games, ex-trading chap.	Chicago, IL	None	56	0	112	904	66	JavaScript,C++	0	0
swisskyrepo	CTF中Web应用程序安全性的Payload和Bypass列表 :	https://github.com/swisskyrepo/PayloadsAllTheThings	https://twitter.com/pentest_swissky	Pentester & Bug Hunter	None	None	7	0	5	895	12	Python,Shell	0	0
ajinabraham	Droid-Application-Fuzz-Framework - 在真实 Android 设备上 Fuzzing Android 浏览器和 PDF 阅读器内存破坏漏洞的框架:	https://github.com/ajinabraham/Droid-Application-Fuzz-Framework	https://github.com/OpenSecurityIN	Security Research & Engineering https://opensecurity.in https://ajinabraham.com	Montreal, Canada	@OpenSecurityIN	125	0	50	893	13	Python,HTML,CSS	0	0
Xyntax	Beautiful list of deep learning tutorial 深度学习案例	https://github.com/Xyntax/ML	https://www.cdxy.me	Web developer, security researcher and data analyst.	Hangzhou,China	Alibaba Cloud	49	0	293	866	85	Python,HTML,PowerShell	1100	561
zhuowei	模拟执行 XNU ARM64 内核的 QEMU 修改版本:	https://github.com/zhuowei/qemu	https://zhuoweizhang.net	Software developer: Android, iOS, Web, Voice	None	None	285	0	741	849	21	C,Shell,Java,Python,C++,HTML	478	156
strazzere	android-scripts - 安卓逆向分析脚本收集:	https://github.com/strazzere/android-scripts	http://www.strazzere.com/blog	Everything can be reversed	Oakland, Ca	None	92	0	236	846	52	Python,Ruby,C,Java	745	290
jas502n	St2-057漏洞的环境搭建与利用技巧(CVE-2018-11776):	https://github.com/jas502n/St2-057	None	1.misc 2.crypto 3. web 4. reverse 5. android 6. pwn 7. elf	None	None	138	0	125	842	113	Python,C,Shell,PHP	299	109
ionescu007	r0ak - 只需要管理员权限就可以实现在 Windows 内核态实现任意读写和代码执行的命令行工具:	https://github.com/ionescu007/r0ak	https://github.com/aionescu	VP of EDR Strategy at CrowdStrike President of Winsider Seminars & Solutions, Inc. Follow me at @aionescu on Twitter and http://www.alex-ionescu.com	None	Winsider Seminars & Solutions Inc.	15	0	0	816	1	C,C++	0	0
brannondorsey	whonow - 用于执行 DNS Rebinding 攻击的恶意 DNS 服务器:	https://github.com/brannondorsey/whonow	https://github.com/runwayml	Artist , Programmer , Researcher	Philadelphia, PA	@runwayml	231	0	1700	804	102	Python,C,TypeScript,JavaScript	0	0
EdOverflow	bugbountyguide - Bug 赏金计划和 Bug 赏金猎人指南:	https://github.com/EdOverflow/bugbountyguide	https://edoverflow.com/	Web developer & security researcher.	::1	None	38	0	168	791	20	Shell,HTML	1600	497
WangYihang	PHP 源代码审计的Sublime插件	https://github.com/WangYihang/Find-PHP-Vulnerabilities	None	If you can read assembly language then everything is open source.	Harbin China	Harbin Institute of Technology	103	0	1100	784	71	Python,Go,Ruby,Rust	0	0
CHEF-KOCH	malware-research: Samples, research and documents	https://github.com/CHEF-KOCH/malware-research	https://github.com/microsoft	Highly interested in PC games, demoscene and security-related topics. I worked for @microsoft and @NVIDIA over 15 years. - Since 2018 for NTT Security -	Lausanne (づ｡◕‿◕｡)づ	CKs Technology News	103	0	2800	778	60	Python,C,Batchfile,JavaScript	0	0
Mr-Un1k0d3r	ThunderShell - Python / PowerShell 实现的 HTTP 通信的远程控制软件:	https://github.com/Mr-Un1k0d3r/ThunderShell	https://github.com/MrUn1k0d3r	Mostly Red Team tools for penetration testing. I think that Ron Jemery is a good ambassador for anything regarding penetration. Twitter - @MrUn1k0d3r	None	RingZer0 Team	18	0	8	777	0	Python,Visual,PowerShell	0	0
boy-hack	使用bugscan插件的扫描器	https://github.com/boy-hack/w9scan	https://www.hacking8.com/	Hacking tools just for fun ~	china	None	28	0	113	749	17	Python,JavaScript	211	69
PaulSec	awesome-windows-domain-hardening - Windows 安全加固方向优秀资源收集:	https://github.com/PaulSec/awesome-windows-domain-hardening	https://paulsec.github.io/	I cant promise anything but Ill do my best.	France	None	93	0	475	746	26	Python,C++	0	0
m4ll0k	SMB Protocol Bruteforce	https://github.com/m4ll0k/SMBrute	https://twitter.com/m4ll0k2	104,97,99,107,101,114,97,110,100&&112,114,111,103,114,97,109,109,101,114	127.0.0.1, Italy - Morocco	localhost	14	0	13	743	20	Python,Shell	0	0
sunnyelf	cheetah-gui:基于字典的webshell密码爆破工具	https://github.com/sunnyelf/cheetah-gui/blob/master/README_zh.md	https://github.com/Qihoo360	Information security researcher, CTF enthusiast.	Beijing, China	@Qihoo360	105	0	893	710	98	Python	0	0
tyranid	Windows Desktop Bridge 的工作原理与漏洞利用,来自 Zer0Con 2018 :	https://github.com/tyranid/Zer0Con_2018/blob/master/A%20Bridge%20too%20Far.pdf	None		None	None	32	0	0	700	2	C#,Python,C	0	0
SandboxEscaper	一个可以部分控制写入内容的 Windows 特权文件写漏洞:	https://github.com/SandboxEscaper/randomrepo/blob/master/angrypolarbearbug.rar	None		None	None	1	0	0	688	0	C++	155	87
vulnersCom	zabbix-threat-control - Zabbix 漏洞评估插件:	https://github.com/vulnersCom/zabbix-threat-control	https://vulners.com	New generation vulnerability intelligence database	None	Vulners	15	0	6	687	0	Python,Lua,Java	0	0
samratashok	ADModule - PowerShell Active Directory 模块备份:	https://github.com/samratashok/ADModule	https://www.labofapenetrationtester.com/	Hacker, InfoSec Professional, PowerShell and AD pwner, Creator of Kautilya and Nishang :) https://labofapenetrationtester.com/	None	None	5	0	78	682	0	Python,PowerShell	2800	1100
AlessandroZ	LaZagneForensic - 利用 Windows API CryptUnprotectData 解密用户密码的取证框架:	https://github.com/AlessandroZ/LaZagneForensic	None		None	None	12	0	13	681	9	Python	0	0
ismailtasdelen	xss-payload-list - XSS Payload 收集:	https://github.com/ismailtasdelen/xss-payload-list	http://ismailtasdelen.com	Hi, My name is Ismail Tasdelen. As a security researcher. Im working Penetration Tester at Ernst & Young.	Istanbul	Ernst & Young	97	0	770	668	974	Python,Shell,HTML	0	0
objective-see	ProcInfo - macOS 上用于监视进程的开源库:	https://github.com/objective-see/ProcInfo	https://www.objective-see.com		United States	Objective-See	11	0	0	644	0	Objective-C	2900	142
Cryptogenic	索尼 PS4 4.55 bpf Kernel Exploit,可以实现内核态任意代码执行:	https://github.com/Cryptogenic/PS4-4.55-Kernel-Exploit	https://twitter.com/SpecterDev	PHP/C++ developer with an interest in user-land and web exploitation.	None	None	28	0	38	642	5	Go,C,JavaScript	0	0
saelo	在 Pwn2Own 2018 中使用的 WebKit JIT 优化错误 (CVE-2018-4233) 的利用:	https://github.com/saelo/cve-2018-4233	http://twitter.com/5aelo		Karlsruhe, Germany	None	31	0	207	638	4	Python,C,JavaScript	646	113
Cyb3rWard0g	HELK: A Hunting ELK with advanced 威胁情报分析平台	https://github.com/Cyb3rWard0g/HELK	https://github.com/Cyb3rWard0g	@Cyb3rWard0g	None	None	10	0	19	636	2	Jupyter,PowerShell	1400	336
xairy	linux-kernel-exploitation - Linux 内核漏洞利用资源收集仓库:	https://github.com/xairy/linux-kernel-exploitation/blob/master/README.md	https://andreyknvl.com/		None	None	33	0	0	630	14	Python,C	2300	552
lcatro	XSS-hunter: 收集Webview 页面上存在的反射,储存型XSS	https://github.com/lcatro/XSS-hunter	https://github.com/lcatro/my-blog	Binary ,WEB vulnerability and Fuzzing Research ..	China	WeBank ,Tencent	51	0	171	596	20	Python,PHP,Mask,C++	391	101
niklasb	3dpwn - VirtualBox 3D 漏洞利用与 PoC:	https://github.com/niklasb/3dpwn	https://twitter.com/_niklasb		Karlsruhe, Germany	None	100	0	143	592	3	Python,TeX,Shell,JavaScript,C++	671	128
c0ny1	vulstudy: 使用docker快速搭建各大漏洞学习平台	https://github.com/c0ny1/vulstudy	http://gv7.me	漏洞在牛角尖上	None	None	13	0	271	583	12	Python,Shell,PHP,Java	1200	307
ibotpeaches	Apktool - Android APK 文件逆向分析工具:	https://github.com/ibotpeaches/Apktool	https://github.com/sourcetoad	Senior Software Engineer @sourcetoad	Tampa	None	57	0	71	572	20	PHP,Java,JavaScript	0	0
OsandaMalith	PESecInfo - 一款可以修改 ASLR 和 DEP 标志的简单工具: https://osandamalith.com/2018/10/24/pe-sec-info-a-simple-tool-to-manipulate-aslr-and-dep-flags/ GitHub:	https://github.com/OsandaMalith/PESecInfo/releases	https://github.com/ZeroDayLab	Love to break things, make things and make things that break things :) Just another security researcher interested in exploring new things.	London	@ZeroDayLab	58	0	7	561	10	Python,C	171	63
OJ	gobuster - Go 语言编写的收集网站 URI 和 DNS 子域名的工具:	https://github.com/OJ/gobuster	https://beyondbinary.io/	NERD! Blogs at http://buffered.io/	Australia	Beyond Binary Pty Ltd	73	0	302	560	18	Go,C,Ruby	0	0
eolinker	GoKu-API-Gateway:悟空API网关开源版	https://github.com/eolinker/GoKu-API-Gateway	https://global.eolinker.com	A powerful All-in-one API management and testing platform, we devote to making APIs Management easier!	Zhong Huan,Hong Kong	EOLINKER Co., Ltd	4	0	3	559	0	Go,PHP	0	0
Siguza	ios-resources - iOS hacking 资源收集 :	https://github.com/Siguza/ios-resources	https://siguza.net		Switzerland	None	39	0	35	559	0	C,Objective-C	0	0
lazywinadmin	AdsiPS - 使用 ADSI 和 System.DirectoryServices 命名空间与 Active Directory 交互的 PowerShell 模块:	https://github.com/lazywinadmin/AdsiPS	https://lazywinadmin.com		San Francisco Bay, CA	None	69	0	578	553	164	PowerShell	738	273
Cn33liz	p0wnedShell - 不依赖 powershell.exe 执行 PowerShell 脚本代码的环境:	https://github.com/Cn33liz/p0wnedShell	https://twitter.com/Cneelis		Groningen, the Netherlands	None	31	0	4	553	2	C#,Visual,JavaScript,C++	1100	293
dxa4481	利用基于 Attribute Selectors 的 CSS 注入偷 CSRF Token:	https://github.com/dxa4481/cssInjection	https://security.love	Full stack hacker	USA	None	83	0	22	550	4	Python,HTML,JavaScript	3600	444
drduh	YubiKey-Guide - 将 YubiKey 用作存储 GPG 加密和签名密钥的智能卡的实用指南:	https://github.com/drduh/YubiKey-Guide	None	GPG: 0xFF3E7D88647EBCDB	None	None	13	0	103	550	5	Python,Shell	0	0
codingo	Reconnoitre - 用于渗透测试的多线程信息收集和服务枚举工具:	https://github.com/codingo/Reconnoitre	https://twitter.com/codingo_	Penetration tester from Australia. Current maintainer of NoSQLMap, VHostScan, Reconnoitre. Co-contributor to subfinder.	Brisbane, Australia	None	137	0	1000	544	239	Python,Go	0	0
i0natan	nodebestpractices - Node.JS 最佳实践列表:	https://github.com/i0natan/nodebestpractices	None	An Independent software architect. Specializes in crafting advanced web applications using Node.js. http://goldbergyoni.com	None	None	11	0	98	532	5	JavaScript,HTML	29500	2300
tandasat	DdiMon - 使用 EPT 通过隐形钩子监视和控制内核 API 调用:	https://github.com/tandasat/DdiMon	http://standa-note.blogspot.ca/	Engineer @standa_t	Vancouver, Canada	None	56	0	16	524	3	C#,C++	0	0
bit4woo	Python安全和代码审计相关资料收集	https://github.com/bit4woo/python_sec	http://code2sec.com/	Creating with coding,Learning by doing,Learning by sharing!	shenzhen	None	111	0	755	521	122	Python,C#,Ruby,Java	0	0
mvdan	sh - shell 解析器,格式化器和解释器,支持POSIX Shell,Bash 以及 mksh:	https://github.com/mvdan/sh	https://mvdan.cc	I work on stuff in Go.	Sheffield, United Kingdom	None	61	0	73	512	24	Go	0	0
blendin	3snake - 转储 sshd 和 sudo 明文密码的工具:	https://github.com/blendin/3snake	http://tiszka.com		None	None	9	0	125	502	65	Python,C	322	60
kgretzky	evilginx2 - 一款用于网络钓鱼,窃取登陆凭证及 cookie 的中间人攻击框架 :	https://github.com/kgretzky/evilginx2	https://breakdev.org	I do reverse engineering and C/C++ dev. A bit of blogging and mainly everything related to information security.	None	None	11	0	56	494	0	Go,Python,C++	2300	370
exp-sky	Chakra 漏洞和绕过所有系统保护机制的利用,来自 AsiaSecWest 2018 腾讯玄武实验室 exp-sky 、Hearmen1 的演讲:	https://github.com/exp-sky/AsiaSecWest-2018-Chakra-vulnerability-and-exploit-bypass-all-system-mitigation/blob/master/Chakra%20vulnerability%20and%20exploit%20bypass%20all%20system%20mitigation.pdf	http://www.exp-sky.org		None	None	16	0	568	494	64	HTML	83	43
jakeajames	multi_path - 针对 CVE-2018-4241 漏洞的 exp:	https://github.com/jakeajames/multi_path/tree/master/multi_path	None	A random guy on the internet.	Antartica	None	69	0	4	493	7	Logos,C	313	146
richlander	dotnet-core-assembly-loading - 使用 .NET Core 加载程序集的示例项目:	https://github.com/richlander/dotnet-core-assembly-loading/blob/master/src/gutenapp/gutenapp/Program.cs	https://github.com/dotnet	.NET Team member, trail runner, Dad, Husband. He/him	Seattle / Toronto	@dotnet	70	0	11	488	9	C#,Shell,HTML,PowerShell	0	0
elfmaster	skeksi_virus - 一款 Linux X86_64 ELF 病毒,目前处于开发中:	https://github.com/elfmaster/skeksi_virus	http://www.bitlackeys.org	Order of operation: Consciousness/Meditation Family Creativity, coding, hacking, reversing, security	Seattle	Leviathan	25	0	19	483	15	C,Objective-C,C++	192	45
andresriancho	websocket-fuzzer - WebSocket Fuzz 测试工具:	https://github.com/andresriancho/websocket-fuzzer	http://w3af.org	Hacker.	Buenos Aires	w3af.org	99	0	27	478	13	Python,JavaScript	2600	821
bazad	ida_kernelcache - 用于分析 iOS kernelcaches 的 IDAPython 模块:	https://github.com/bazad/ida_kernelcache	https://bazad.github.io	iOS security research	None	None	28	0	1	474	0	Python,C	194	31
danielbohannon	Invoke-CradleCrafter - PowerShell 远程 Download Cradle 生成器和混淆器:	https://github.com/danielbohannon/Invoke-CradleCrafter	http://danielbohannon.com	Principal Applied Security Researcher (prev IR Consultant)	Washington, D.C.	Mandiant	7	0	0	472	5	PowerShell	0	0
Tamicer	SkyMonitoring: Android Static FrameWork, 埋点统计SDK	https://github.com/Tamicer/SkyMonitoring	http://www.tamicer.com/	。。。。。。。。。。。	shanghai	meituan	69	0	111	470	32	Java	1400	271
mrexodia	haxxmap - 代理 IMAP 服务获取密码的工具:	https://github.com/mrexodia/haxxmap	https://github.com/x64dbg	Passionate C++ developer and reverse engineer. Main developer of @x64dbg. Also familiar with C#, Haskell, Assembly, Python and a bunch of web-related languages.	Poland	None	255	0	125	458	1	C,C++	0	0
joxeankoret	IDAMagicStrings - 一款可以通过字符串中的信息来推测函数名的 IDA 插件:	https://github.com/joxeankoret/idamagicstrings	http://www.joxeankoret.com		Basque Country	None	30	0	87	458	2	Python	1300	207
williballenthin	python-registry - 读取 Windows 注册表信息的 Python 库:	https://github.com/williballenthin/python-registry	https://github.com/fireeye	/usr/bin/nethack	None	@fireeye	62	0	206	451	47	Python,Rust	0	0
zodiacon	ProcMonX - 一个基于 Windows 事件日志追踪实现的类似于 Process Monitor 的工具:	https://github.com/zodiacon/ProcMonX	http://scorpiosoftware.net		None	None	50	0	99	448	8	C#,C	0	0
hacksysteam	通过 Web Proxy Auto-Discovery(WPAD) 进行沙箱逃逸:	https://github.com/hacksysteam/WpadEscape	http://hacksys.vfreaks.com/	Vulnerability Research, Kernel Exploitation, Reverse Engineering, Exploit Development, Program Analysis, Malware Research, Web, Machine Learning	None	None	11	0	0	447	0	Python,C,JavaScript	868	276
infosecn1nja	Red-Teaming-Toolkit - 红队常用工具整理(包括开源及商业工具):	https://github.com/infosecn1nja/Red-Teaming-Toolkit	None	Red/Purple Teaming & Threat Hunting. Contributors of Mitre ATT&CK, Empire, Atomic Red Team, LOLBAS and more.	Jakarta, Indonesia	None	28	0	539	444	53	PHP,PowerShell	0	0
jofpin	trape - 通过 OSINT 在互联网上追踪人员的工具:	https://github.com/jofpin/trape	https://twitter.com/jofpin	Hacker. Restless permanently by creating new things.	Colombia	None	27	0	121	428	44	Python,CSS	3900	599
KirillOsenkov	pdb.exe 工具,用于下载 dll 的符号文件,在子文件夹中找到匹配的 .pdb :	https://github.com/KirillOsenkov/MetadataTools/releases/tag/v1.0.6	https://github.com/microsoft	Working on developer tools at Microsoft. .NET, C#, Roslyn, Visual Studio, Visual Studio for Mac, MonoDevelop, VS Editor, WPF, MSBuild, MEF, CPS.	Redmond, WA	@microsoft	98	0	425	428	661	C#,C++	0	0
j00ru	windows-syscalls - 从 Windows NT 开始的所有 Windows 版本中的系统调用表收集仓库:	https://github.com/j00ru/windows-syscalls	https://j00ru.vexillium.org/	Windows hacker & vulnerability researcher	None	Google	2	0	1	424	0	Python,HTML,C++	0	0
Bo0oM	使用 imap_open 绕过 php disable_functions 执行命令 : https://github.com/Bo0oM/PHP_imap_open_exploit;	https://github.com/Bo0oM/PHP_imap_open_exploit;	https://github.com/ONsec-Lab	https://twitter.com/i_bo0om	None	@ONsec-Lab @wallarm	18	0	241	421	13	Python,HTML,PHP	0	0
mthbernardes	sshLooter - 从 SSH 中窃取用户密码的脚本:	https://github.com/mthbernardes/sshLooter	https://mthbernardes.github.io		Campinas	None	75	0	22	415	45	Go,Python,C,Shell	497	101
nahamsec	lazyrecon - 渗透测试前期情报自动化收集工具:	https://github.com/nahamsec/lazyrecon	http://nahamsec.com		None	None	12	0	0	407	0	Python,Shell,Ruby	449	123
k0keoyo	kDriver-Fuzzer：基于ioctlbf框架编写的驱动漏洞挖掘工具	https://github.com/k0keoyo/kDriver-Fuzzer	https://whereisk0shl.top	Binary vulnerability researcher,focus on Windows & Linux kernel,VM escape and Fuzzing research	None	None	87	0	83	401	27	C,JavaScript,C++	358	135
wagoodman	dive - 一款按层分析 docker 镜像的工具,可以用于缩小 docker 镜像:	https://github.com/wagoodman/dive	None	twitter @alexgoodman87 www.linkedin.com/in/alexgoodman87	Alexandria, VA	None	58	0	653	399	9	Go,Python,Shell,Java	0	0
shengqi158	Weblogic反序列化漏洞(CVE-2018-2628)	https://github.com/shengqi158/CVE-2018-2628	http://xxlegend.com	xxlegend.com	None	None	89	0	297	395	31	Python,Java	200	78
bkimminich	juice-shop - Node.js 编写的 Web 安全漏洞测试项目:	https://github.com/bkimminich/juice-shop	https://github.com/kuehne-nagel	IT Architect @kuehne-nagel, Project Leader @OWASP Juice Shop, IT Security Lecturer @Nordakademie.	Hamburg, Germany	Kuehne+Nagel (AG & Co.) KG	60	0	1000	392	216	C,JavaScript	0	0
Arno0x	ReflectiveDnsExfiltrator - 利用 DNS 解析进行数据隐秘传输的工具:	https://github.com/Arno0x/ReflectiveDnsExfiltrator	None		None	None	32	0	22	391	0	Python,JavaScript,PowerShell,C++,HTML	314	98
ptresearch	Intel ME 安全密钥衍生谱系,来自 Thomas Dullien:	https://github.com/ptresearch/IntelME-Crypto/blob/master/Intel%20ME%20Security%20keys%20Genealogy%2C%20Obfuscation%20and%20other%20Magic.pdf	None		None	Positive Research Team	13	0	1	385	0	Python	470	143
sjvasquez	web-traffic-forecasting: Kaggle 网站流量预测比赛代码	https://github.com/sjvasquez/web-traffic-forecasting	None	Undergraduate at MIT	Cambridge, MA	None	6	0	0	381	0	Python	0	0
az0ne	MongoDB_AutoDump: 快速探测未授权MongoDB数据库结构	https://github.com/az0ne/MongoDB_AutoDump	http://az0ne.lofter.com		China	ANTIY	321	0	967	379	32	Python,JavaScript,Lua,HTML,Go,PowerShell	377	171
CoolerVoid	rootstealer - 检测 Linux 中的 root 用户终端并注入自定义命令:	https://github.com/CoolerVoid/rootstealer	http://funguscodes.blogspot.com.br/	Just another computer programmer, twitter: @Cooler_freenode	brazil - sao paulo	None	67	0	177	378	101	C,C++	0	0
MachineLP	Tensorflow实战学习笔记	https://github.com/MachineLP/Tensorflow-	http://blog.csdn.net/u014365862/article/details/78422372	wechat: lp9628	https://t.zsxq.com/e62RFub	MachineLP	172	0	391	377	72	Python,HTML,Jupyter,C++	0	0
fate0	xmark:PHP hook 框架	https://github.com/fate0/xmark	http://www.fatezero.org	time waits for no one	China	None	15	0	4	376	5	Python,C,PHP,HTML	0	0
xdavidhu	lanGhost - 可通过 Telegram 控制的局域网后门:	https://github.com/xdavidhu/lanGhost	https://xdavidhu.me/	Hacker & Web developer & Bug Hunter	Hungary	None	14	0	201	373	4	Python,HTML	0	0
0x09AL	Go-deliver - Go 语言编写的 Payload 分发工具:	https://github.com/0x09AL/go-deliver	https://twitter.com/0x09AL		None	None	94	0	114	372	19	Go,Python,Ruby,C++	0	0
xorrior	RemoteRecon - 后渗透测试工具:	https://github.com/xorrior/RemoteRecon	https://www.xorrior.com	PowerShell, C#, Obj-C, macOS Security, Red Team Operator	None	SpecterOps	53	0	93	369	9	C#,Objective-C,PowerShell,C++	0	0
mattiasgeniar	php-exploit-scripts - PHP 漏洞利用脚本收集:	https://github.com/mattiasgeniar/php-exploit-scripts	http://ma.ttias.be		Edegem, Antwerp	Nucleus	84	0	323	366	105	Shell,PHP,VCL,Perl	609	265
bluscreenofjeff	Red-Team-Infrastructure-Wiki	https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki	https://bluescreenofjeff.com	Adversary Simulation Lead at SpecterOps. Focused on red team and pentest development.	None	https://specterops.io	10	0	7	361	13	Python,Shell	1700	426
LandGrey	CVE-2018-2894 WebLogic 未授权访问致任意文件上传/RCE漏洞检查脚本 :	https://github.com/LandGrey/CVE-2018-2894/	https://landgrey.me	I learn cyber sec	CHINA	None	12	0	1100	356	32	Python,ASP	0	0
rrbranco	现代计算机防御技术的介绍:	https://github.com/rrbranco/Presentations/blob/master/Hacktivity_Keynote_October2018.pdf	https://twitter.com/bsdaemon	Chief Security Researcher (Personal Account)	United States	Intel Corporation	28	0	8	355	10	Python,C,Shell,C++	72	32
hslatman	awesome-industrial-control-system-security - 工控系统安全方向优秀资源收集仓库:	https://github.com/hslatman/awesome-industrial-control-system-security	https://hermanslatman.nl		None	None	100	0	2800	355	60	Python,HTML,PHP	0	0
serhii-londar	open-source-mac-os-apps - macOS 上的优秀开源应用收集:	https://github.com/serhii-londar/open-source-mac-os-apps	https://www.patreon.com/serhiilondar		Lviv, Ukraine	None	85	0	1900	352	314	Objective-C,Swift	0	0
owenliang	PHP-FPM源码分析	https://github.com/owenliang/php-fpm-code-analysis	None	精神>思想>技术	china	www.baidu.com	98	0	38	351	4	Go,C	0	0
DamonMohammadbagher	在内存中检测Meterpreter工具 :	https://github.com/DamonMohammadbagher/Meterpreter_Payload_Detection	https://www.linkedin.com/in/damon-mohammadbagher-2b154484	Security Researcher 🇮🇷 https://twitter.com/_Damon_M_	None	None	18	0	43	351	0	C#,Shell	0	0
Moham3dRiahi	XBruteForcer - 自动化暴力破解 WordPress, Joomla, DruPal, OpenCart, Magento 等站点账户密码的脚本:	https://github.com/Moham3dRiahi/XBruteForcer	None	G33k 👤, programmer 💻, Pentester ⚠ , Defacer 👨‍💻, Crypto fan 🔒, Malware lover ☢, security researcher 🔎, open source fan ❤, AGE: 22 📧 ICQ : 712653075	Tunisia	None	4	0	0	349	0	Perl	0	0
gossip-sjtu	K-Hunt工具 - 通过 Execution Traces 定位不安全的加密密钥:	https://github.com/gossip-sjtu/k-hunt	https://loccs.sjtu.edu.cn/wiki/doku.php?id=gossipwiki	Group of Software Security In Progress (GoSSIP) 小组，来自上海交通大学密码与计算机安全实验室（LoCCS）的活跃的学术安全团队	Shanghai, China	Shanghai Jiao Tong University	9	0	0	344	0	TeX,C,Assembly,C++	491	130
GoSSIP-SJTU	TripleDoggy - 基于clang static analyzer的源码漏洞检测工具:	https://github.com/GoSSIP-SJTU/TripleDoggy	https://loccs.sjtu.edu.cn/wiki/doku.php?id=gossipwiki	Group of Software Security In Progress (GoSSIP) 小组，来自上海交通大学密码与计算机安全实验室（LoCCS）的活跃的学术安全团队	Shanghai, China	Shanghai Jiao Tong University	9	0	0	344	0	TeX,C,Assembly,C++	491	130
cujanovic	Open-Redirect-Payloads: Open Redirect Payloads	https://github.com/cujanovic/Open-Redirect-Payloads	https:/twitter.com/cujanovic		None	None	27	0	146	341	0	Python	0	0
sbilly	awesome-security - 网络安全方向的优秀资源收集仓库:	https://github.com/sbilly/awesome-security	http://sbilly.com/		China	None	349	0	2100	337	745	C,Shell,Python,C++,HTML,Go,PHP	4400	808
vipstone	faceai：一款优秀的人脸检测、人脸识别、视频识别、文字识别等智能AI项目	https://github.com/vipstone/faceai	None	微信公众号：王磊的博客	xian, china	Java	32	0	122	336	14	Python,JavaScript,Java	0	0
Kevin-Robertson	Invoke-TheHash - PowerShell 实现的哈希传递攻击套件:	https://github.com/Kevin-Robertson/Invoke-TheHash	https://github.com/NetSPI		None	@NetSPI	7	0	220	336	8	C#,PowerShell	880	217
phil-opp	用 Rust 来写一个 OS:	https://github.com/phil-opp/blog_os	http://phil-opp.com		Karlsruhe, Germany	None	85	0	206	333	19	HTML,Rust	0	0
dafthack	PowerMeta - 通过搜索引擎下载指定域名下的所有文件,然后做元数据分析以提取敏感信息的工具:	https://github.com/dafthack/PowerMeta	http://www.twitter.com/dafthack		None	None	13	0	18	331	1	PHP,Ruby,PowerShell	1100	246
rvrsh3ll	Misc-Powershell-Scripts - PowerShell 渗透测试脚本收集:	https://github.com/rvrsh3ll/Misc-Powershell-Scripts	None	I hack code together and hope it works.	NOVA	None	137	0	19	329	9	Python,C#,HTML,PowerShell	417	124
random-robbie	Jira-Scan: CVE-2017-9506 POC	https://github.com/random-robbie/Jira-Scan	https://xsses.rocks	PHP/Python & Raspberry Pi Lover Docker	Wirral UK	None	200	0	198	318	86	Python,Go,PHP	253	99
hannob	snallygaster - 一款扫描 Web 目录敏感文件的工具: 介绍, https://blog.hboeck.de/archives/892-Introducing-Snallygaster-a-Tool-to-Scan-for-Secrets-on-Web-Servers.html GitHub:	https://github.com/hannob/snallygaster	https://hboeck.de/		Berlin	None	79	0	2	318	2	Python,Shell,PHP	1400	150
Tuhinshubhra	CMSeeK: CMS Detection and Exploitation suite	https://github.com/Tuhinshubhra/CMSeeK	https://twitter.com/r3dhax0r	I code and hack for fun!	...	None	13	0	2	316	0	Python,PHP,JavaScript,CSS	0	0
re4lity	枚举kerberos域用户的字典	https://github.com/re4lity/kerberos_enum_dict	https://github.com/PolarisLab	@PolarisLab & MottoIN	ShangHai	PolarisLab	710	0	2700	312	101	C#,PowerShell,C++	0	0
xtr4nge	FruityWifi - 无线网络安全审计工具,适用于多个 Linux 发行版系统:	https://github.com/xtr4nge/FruityWifi	None		None	None	78	0	2	311	0	Python,PHP,JavaScript,PowerShell,Perl	1600	428
api0cradle	LOLBAS - 使用 Windows 本地自带的可执行文件进行攻击的使用维基:	https://github.com/api0cradle/LOLBAS	https://oddvar.moe		None	None	65	0	60	309	8	PowerShell,C++,XSLT	0	0
ufrisk	pcileech-fpga - 针对 FPGA 设备的 PCILeech DMA 攻击套件:	https://github.com/ufrisk/pcileech-fpga	None	IT-Security Minion , DMA Hacker , @UlfFrisk	Sweden	None	15	0	68	308	15	Python,C,Verilog	0	0
teh-cmc	go-internals - 深入理解 Go 语言(网络书籍,编写中):	https://github.com/teh-cmc/go-internals	https://github.com/znly	Data Platform Engineering @znly. Programming, Climbing, Starcraft, Vim.	Paris, France	@znly	19	0	1600	305	182	Go,C	0	0
rootm0s	Injectors - 应用到各种 DLL/Shellcode 注入技术的项目:	https://github.com/rootm0s/Injectors	None		Unknown	Unknown	5	0	164	305	0	Python	0	0
berzerk0	Probable-Wordlists 2.0 发布,一个通用密码字典收集仓库:	https://github.com/berzerk0/Probable-Wordlists	https://berzerk0.github.io/GitPage/	Cyber/Infosec - Aspiring Red Teamer - EE - Convincing people password is not a good password - Iced Tea Expert - occasional blogger	New York City	Open to new Cybersec/Infosec/Hardware Opportunities	11	0	149	301	6	Python	0	0
xyzz	rop-rpc - 在任天堂 Switch 上运行 ROP Payload 的工具:	https://github.com/xyzz/rop-rpc	https://blog.xyz.is/	it is a mystery	None	None	107	0	32	300	3	Python,Kotlin,C,HTML,C++	300	80
lefex	iWeChat: 勾勒出微信的设计，使用到的技术手段	https://github.com/lefex/iWeChat	https://github.com/lefex/LefexWork	移动端开发工程师，不断探索提高开发效率的捷径。喜欢我的，关注我的微博 Lefe_x	BeiJing	百度	72	0	228	299	70	Objective-C,HTML,CSS,C++	0	0
JoyChou93	Java常见通用漏洞和修复的代码以及利用payload	https://github.com/JoyChou93/java-sec-code	https://github.com/alibaba	Syclover, Alibaba, Security Engineer, Full Stack Engineer	HangZhou	@alibaba	18	0	209	299	50	Python,Java	0	0
oguzhaninan	Stacer - Linux 系统优化与监控工具:	https://github.com/oguzhaninan/Stacer	https://oguzhaninan.gitlab.io/	KTU Computer Science and Statistics https://twitter.com/oguzaninan	Trabzon, Turkey	None	6	0	1700	298	27	TypeScript,JavaScript,C++	0	0
bingohuang	docker-labs: Docker在线实验室	https://github.com/bingohuang/docker-labs	https://bingohuang.com	Father - Gopher - Cloud	Hangzhou,China	@huawei-cloud	50	0	491	298	76	Go,Java,JavaScript,Ruby	0	0
countercept	snake - 恶意软件样本存储工具:	https://github.com/countercept/snake	https://github.com/countercept		UK, New York, South Africa, Singapore	@countercept	18	0	0	296	0	Python,C,Shell	922	321
CunningLogic	DUMLRacer - Root Exploit for DJI Drones and Controllers:	https://github.com/CunningLogic/DUMLRacer	None		None	None	120	0	36	296	12	Shell,Java,C++	85	39
0xInfection	TIDoS-Framework - Web 应用程序渗透测试框架:	https://github.com/0xInfection/TIDoS-Framework	https://twitter.com/0xInfection	I am just an Infected Geek...	None	CodeSploit	4	0	64	295	0	Python	0	0
mazen160	struts-pwn_CVE-2018-11776: ST2-057 Exploit:	https://github.com/mazen160/struts-pwn_CVE-2018-11776	https://mazinahmed.net	Information Security Specialist / Penetration Tester	None	None	15	0	0	294	0	Python,Shell	341	119
BigNerd95	Chimay-Red - Vault 7 CIA 泄漏的 Mikrotik 漏洞利用 POC:	https://github.com/BigNerd95/Chimay-Red	https://bignerd95.blogspot.it/	Computer Science Student at UniTo (University of Turin). I love reverse engineering of embedded systems.	Italy	None	40	0	225	294	16	Python,C,Shell	0	0
milo2012	pathbrute - Web 路径暴力破解工具:	https://github.com/milo2012/pathbrute	http://milo2012.wordpress.com		None	None	65	0	131	292	5	Python,Go,PowerShell	381	179
ZephrFish	DockerAttack - 渗透测试用的 Docker 镜像:	https://github.com/ZephrFish/DockerAttack	https://blog.zsec.uk	I hack things, write things and break things. So my life is full of things.	None	None	92	0	12	290	6	Python,Shell,PowerShell	0	0
ClimbsRocks	auto_ml: Automated machine learning for analytics & production	https://github.com/ClimbsRocks/auto_ml	http://PrestonParry.com	Rock Climber, Biker, Community Builder, Teacher, data scientist & machine learning geek	Oakland	auto.ml	120	0	311	290	111	Python,JavaScript,C++	0	0
Te-k	Harpoon - 开源情报收集工具,介绍: https://www.randhome.io/blog/2018/02/23/harpoon-an-osint-/-threat-intelligence-tool/ GitHub:	https://github.com/Te-k/harpoon	https://www.randhome.io		None	None	60	0	135	288	104	Python,YARA,C	785	769
CyberMonitor	APT_CyberCriminal_Campagin_Collections - 2006 年至今的几乎所有公开的 APT 攻击分析报告收集:	https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections	None		None	None	238	0	40	286	5	C,Shell,C#,JavaScript,C++,HTML,Go,PowerShell	1000	305
0x4D31	awesome-threat-detection - 威胁检测与追击方面的资源集:	https://github.com/0x4D31/awesome-threat-detection	https://github.com/salesforce	Lead Threat Detection Engineer @salesforce	Sydney, Australia	None	19	0	1100	285	77	Python,Go	0	0
threathunterX	nebula: 星云业务风控系统	https://github.com/threathunterX/nebula	https://www.threathunter.cn/		Shenzhen	威胁猎人	16	0	2	283	0	Python,Lua,JavaScript,Java,CSS	494	190
Ice3man543	subfinder - 子域名枚举工具:	https://github.com/Ice3man543/subfinder	https://ice3man.me	Doing security stuff! Automating things because of my laziness to the fullest.	None	None	39	0	329	283	82	Go,Python,C	0	0
ExpLife0011	awesome-windows-kernel-security-development - Windows 内核安全开发相关的文章与项目收集:	https://github.com/ExpLife0011/awesome-windows-kernel-security-development	None		None	None	2800	0	3000	283	487	C,Assembly,Python,AngelScript,C++,C#	668	226
TruthHun	DocHub: 使用Beego（Golang）开发的开源文库系统	https://github.com/TruthHun/DocHub	https://www.bookstack.cn	当你的知识再也支撑不起你的野心，该静下心来认真学习了。	深圳	None	370	0	1100	282	39	TypeScript,Java,HTML,JavaScript,Shell,Go	0	0
struct	实用的内存安全缓解措施:	https://github.com/struct/research/blob/master/Effective_Memory_Safety_Mitigations.pdf	http://struct.github.io	I do security stuff	@chrisrohlf	None	18	0	46	268	55	C,HTML,Ruby,C++	0	0
caseysmithrc	memMITM - 内存检测 SSL 的 POC:	https://github.com/caseysmithrc/memMITM	None		None	None	190	0	7	267	0	C#,C,PHP,PowerShell,C++	54	22
pyn3rd	WebLogic 反序列化远程代码执行漏洞 POC 发布(CVE-2018-2893):	https://github.com/pyn3rd/CVE-2018-2893	https://twitter.com/pyn3rd		Hangzhou	Alibaba Group	7	0	0	262	0	Python,Batchfile,Java	126	46
lavalamp-	ipv666 - IPv6 地址枚举工具:	https://github.com/lavalamp-/ipv666	https://l.avala.mp/		Venice, CA	None	20	0	228	261	27	Python,TypeScript,Shell,Go,Lua	0	0
0x00-0x00	ShellPop - 生成各种语言正向/反向 shell 的工具:	https://github.com/0x00-0x00/ShellPop	https://0x00-0x00.github.io	Penetration Tester, OSCP.	Assis-SP, Brazil	Morphus	198	0	254	260	13	Python,C#,C,Shell,PowerShell	0	0
scanfsec	Drcomdecoder: Drcom 数据库账号密码加解密	https://github.com/scanfsec/Drcomdecoder	http://www.scanfsec.com	Web Security Engineer	None	Nu1L & Symbo1	175	0	3200	259	899	Python,C#,C,JavaScript,C++	21	11
grayddq	PublicMonitors: 公网IP列表端口服务及弱口令周期扫描	https://github.com/grayddq/PublicMonitors	None	一位喜欢原创的安全工作者！	None	None	14	0	0	256	0	Python	276	93
anhkgg	PyRat: PyRat，a rat by python xmlrpc	https://github.com/anhkgg/PyRat	https://anhkgg.github.io	微信公众号: 汉客儿	USA	TY	75	0	137	255	13	Python,C,C++	0	0
WebBreacher	yoga: Your OSINT Graphical Analyzer	https://github.com/WebBreacher/yoga	https://webbreacher.com		None	Spotlight Infosec	27	0	9	255	0	Python,JavaScript	548	110
ScottyBauer	Android bluetooth remote heap disclosure PoC(CVE-2017-13259) :	https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/commit/7c164cca56aae19edd417f597f92423965415f50	https://plzdonthack.me		Indiana	Qualcomm	15	0	8	254	8	TeX,C	594	201
WyAtu	Microsoft Exchange Server 特权提升漏洞(CVE-2018-8581)利用 :	https://github.com/WyAtu/CVE-2018-8581/	None	Security Researcher	None	None	12	0	14	251	8	Python,C	343	155
hlldz	SpookFlare - Meterpreter, Empire, Koadic 等后门的生成器/加载器,用于协助绕过客户端防御与网络检测:	https://github.com/hlldz/SpookFlare	https://artofpwn.com	Pwner, Red Teamer	İstanbul, Türkiye	None	5	0	186	249	23	Python,PowerShell,C++	0	0
bhdresh	Dejavu - 一款开源欺骗框架,通过部署诱饵检测攻击行为:	https://github.com/bhdresh/Dejavu	None	This is a personal repository. Tools/opinions/comments are my own and not of my employer.	None	Personal repository	11	0	10	247	1	Python,C#,CSS	572	267
jaredhaight	SharpAttack - 在安全评估时使用的包含多种实用功能的控制台:	https://github.com/jaredhaight/SharpAttack	https://www.psattack.com		Seattle, WA	X-Force Red	54	0	26	244	4	C#,PowerShell	0	0
phantom0301	VulCloud: 便捷的漏洞镜像管理部署Web应用	https://github.com/phantom0301/VulCloud	http://phantom0301.github.io/	Free and Share	Chengdu	None	80	0	30	242	8	Python,JavaScript,PowerShell	0	0
can1357	利用 POP SS 漏洞以内核权限执行任意代码的 Exp(CVE-2018-8897):	https://github.com/can1357/CVE-2018-8897	https://can.ac/	Im an independent security researcher and a self-employed reverse engineer; mostly interested in Windows kernel development and low-level programming.	None	None	6	0	14	242	11	C,Cuda,C++	0	0
paranoidninja	Pandoras-Box - 创建网站的欺骗证书并为可执行文件签名以逃避杀软检测的工具:	https://github.com/paranoidninja/Pandoras-Box/blob/master/python/CarbonCopy.py	https://scriptdotsh.com/	,, OSCP ,, Security Researcher ,, Coding Enthusiast ,, Malware Developer ,, Threat Hunter ,, Ninja ,, I am a Ninja, and I slice Computers with my Katana	Last seen on Ring 0. Current Location Unknown	None	13	0	0	241	0	Python,C,C++	0	0
iGio90	uDdbg - 类似 gdb 的调试器,提供到 Unicorn 模拟器的运行时环境:	https://github.com/iGio90/uDdbg	https://github.com/overwolfmobile	Developer @ StatsRoyale and Overwolf mobile team. Reverse engineering my life into something human readable.	Unknown	@overwolfmobile	137	0	99	238	44	Python,JavaScript,Java	0	0
tbodt	ish - Linux shell for iOS:	https://github.com/tbodt/ish	https://tbodt.com	I write lines of code that sometimes work and sometimes fail spectacularly. Its more fun when they fail spectacularly.	None	None	150	0	166	236	23	C,C++	0	0
SkyLined	BugId - 用于检测、分析和识别应用程序错误的 Python 模块:	https://github.com/SkyLined/BugId	https://twitter.com/berendjanwever	ASCII art evangelist , motivational coder , full stack IoT blockchain machine learning cyber-cloud threat actor	The Netherlands	None	55	0	0	234	0	Python	0	0
rk700	YAHFA - Android ART hook 框架:	https://github.com/rk700/YAHFA	http://rk700.github.io		None	None	17	0	56	233	2	Python,C,Java	0	0
zcgonvh	NTDSDumpEx: NTDS.dit offline dumper with non-elevated	https://github.com/zcgonvh/NTDSDumpEx	http://www.zcgonvh.com	Window and .net	None	None	8	0	0	232	1	C#,C,Ruby,C++	88	45
Und3rf10w	boblobblob - 从 Git 仓库中隐藏文件的方法及脚本 :	https://github.com/Und3rf10w/boblobblob	http://und3rf10w.blogspot.com/		None	None	40	0	713	232	7	Python,Shell,PowerShell	0	0
paralax	awesome-honeypots: an awesome list of honeypot resources	https://github.com/paralax/awesome-honeypots	https://github.com/censys	security, cooking, biochemistry. a lot of internet scanning now.	ann arbor, mi	@censys	264	0	491	230	1	Python,PHP,F#	3200	627
nullbind	Get Domain Admins (GDA) - 辅助攻击域环境的脚本:	https://github.com/nullbind/Other-Projects/tree/master/GDA	https://github.com/NetSPI	Twitter: @_nullbind http://www.netspi.com/blog/author/ssutherland/ http://www.slideshare.net/nullbind	None	@NetSPI	56	0	832	230	46	Shell,Batchfile,Ruby,PowerShell	240	87
nh2	使用 strace 调试管道与套接字之间的通信:	https://github.com/nh2/strace-pipes-presentation/blob/master/presentation/Debugging%20across%20pipes%20and%20sockets%20with%20strace.pdf	https://github.com/tsurucapital	Bio: Imperial College London, @tsurucapital @google @fpco	Zürich	My own consultancy	342	0	105	229	24	Python,Nix,Haskell,C++	323	20
austin-taylor	VulnWhisperer - 漏洞数据和报告汇总工具:	https://github.com/austin-taylor/VulnWhisperer	http://www.austintaylor.io	https://twitter.com/HuntOperator	None	None	63	0	94	229	40	Python,HTML,Jupyter	0	0
UnaPibaGeek	ctfr - 滥用证书透明度日志获取HTTPS网站子域名的工具:	https://github.com/UnaPibaGeek/ctfr	https://github.com/UnaPibaGeek	Security Researcher / Reverse engineer / Exploit Writer / Im @UnaPibaGeek on Twitter.	None	http://www.semecayounexploit.com	5	0	0	229	0	Python,Ruby,C++	1200	177
frizb	Bypassing-Web-Application-Firewalls: A series of python scripts	https://github.com/frizb/Bypassing-Web-Application-Firewalls	None		None	None	32	0	261	228	10	Python,Batchfile,HTML	355	96
troglobit	nemesis - 用于网络报文构造与注入的命令行工具:	https://github.com/troglobit/nemesis	http://troglobit.com	Elegance is not a dispensable luxury -- Edsger Wybe Dijkstra	Västerås, Sweden	Westermo R&D	91	0	507	222	22	C	0	0
neal1991	gshark: Scan for sensitive information in Github easily and effectively	https://github.com/neal1991/gshark	https://madneal.com	Obviously, I am cool.	Shanghai	ECNU	96	0	514	222	58	Shell,JavaScript,Java,HTML	0	0
RobinDavid	LSB-Steganography - 使用最低有效位将文件隐写到图像中的 Python 脚本:	https://github.com/RobinDavid/LSB-Steganography	http://www.robindavid.fr		Paris, France	None	22	0	273	221	34	Python	462	178
pmusolino	Wormholy - iOS 网络调试工具:	https://github.com/pmusolino/Wormholy	http://www.codeido.com	Im an iOS Software Engineer with 6 years of experience in the iOS platform, with extensive experience in building high-quality apps. Available to work remotely	Rome	None	37	0	1000	220	106	Swift	0	0
wbenny	ia32-doc - 将 IA32 的手册中的定义,转换为机器可读的版本(yaml):	https://github.com/wbenny/ia32-doc	https://twitter.com/PetrBenes		Brno, Czech Republic	None	19	0	93	219	9	C,C++	0	0
bcicen	grmon - goroutines 的命令行监视工具:	https://github.com/bcicen/grmon	https://bradley.codes	Prototyping from the corner deli.	New York	None	114	0	894	219	16	Go,Python,Vim	0	0
Viralmaniar	Passhunt - 用于搜索网络设备,Web 应用程序等的默认凭证的工具:	https://github.com/Viralmaniar/Passhunt	https://twitter.com/maniarviral		Melbourne, Victoria, Australia	None	36	0	221	219	93	Python,Shell	725	110
saaramar	Linux 上的漏洞在 Windows 上用,利用 Windows 10 的 WSL 子系统实现提权:	https://github.com/saaramar/execve_exploit/blob/master/talk_slides.pdf	None	@AmarSaar in twitter, known as amarsa	None	None	7	0	28	218	6	Python,C,C++	195	38
hc0d3r	Sudohulk - 替换 sudo,利用 ptrace Hook execve 系统调用实现劫持:	https://github.com/hc0d3r/sudohulk	http://hc0d3r.github.io		Brasil	None	20	0	261	218	31	C	0	0
hzqst	VmwareHardenedLoader - 一款对抗恶意代码的虚拟机检测工具 :	https://github.com/hzqst/VmwareHardenedLoader	None		China	None	17	0	13	217	2	C,C++,POV-Ray	0	0
RUB-SysSec	Microcode - 逆向 x86 处理器微码的框架和示例程序:	https://github.com/RUB-SysSec/Microcode	https://syssec.rub.de		Bochum, Germany	Ruhr-University Bochum	18	0	11	217	0	Python,C,C++	358	98
caffix	amass - Go 语言编写的子域名收集工具:	https://github.com/caffix/amass	https://twitter.com/jeff_foley	Security Researcher, Red Team Manager, Gopher and Project Leader of OWASP Amass	New York, United States	None	23	0	400	216	39	Go,Ruby	0	0
0xdea	tactical-exploitation - 战术型渗透测试工具包:	https://github.com/0xdea/tactical-exploitation	https://0xdeadbeef.info/	You cant argue with a root shell.	Italy	None	11	0	81	214	0	Python,C,JavaScript,Assembly,PowerShell	506	84
guidovranken	libfuzzer-java - Guido Vranken 开源了他的 Java Fuzz 工具:	https://github.com/guidovranken/libfuzzer-java	https://github.com/ethereum		Netherlands	@ethereum	46	0	7	213	6	C,Java,Python,C++,Go,Ruby	130	27
f0rb1dd3n	Reptile - LKM Linux rootkit (支持 2.6.x/3.x/4.x 内核版本):	https://github.com/f0rb1dd3n/Reptile	None		None	None	2	0	20	211	4	C	1000	253
jamesroutley	如何用 C 语言实现哈希表:	https://github.com/jamesroutley/write-a-hash-table	https://github.com/monzo	Backend engineer at Monzo. Recurse Center alum. Twitter: @james_routley	London	@monzo	42	0	9	210	4	Python,Vim	0	0
turbo	利用 CPU 数据缓存侧信道漏洞实现任意虚拟内存读,这篇 Blog 来自 Project Zero,介绍的正是这两天爆出的 CPU 缓存侧信道漏洞的细节,受此漏洞影响的 CPU 包括 Intel、AMD 和 ARM: 1) https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html 2) https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html 3) https://meltdownattack.com/ CPU 缓存侧信道漏洞 Meltdown/Spectre 的 PoC 代码: https://github.com/turbo/KPTI-PoC-Collection 漏洞的背景资料 - KPTI 是为了解决 KASLR bypass 问题而生基本上是个幌子,来自 hardenedlinux weibo:	https://github.com/turbo/KPTI-PoC-Collection	https://github.com/solarwinds	Turning PCs up to eleven by trade and passion.	Berlin, Germany	@solarwinds	185	0	350	209	9	Assembly,C#,JavaScript,C++,MoonScript,Lua,Batchfile,Common	0	0
Souhardya	UBoat - HTTP 协议后门项目:	https://github.com/Souhardya/Uboat	https://github.com/SigBitsLabs	17/ RE / Code / Pwn ? - Mercenary for hire ¯_(ツ)_/¯	Kolkata	@SigBitsLabs	20	0	931	205	93	Python,Assembly,C,Ruby,C++	0	0
Escapingbug	Awesome browsers exploits - 一些有关浏览器漏洞利用文章的分享:	https://github.com/Escapingbug/awesome-browser-exploit	https://github.com/Team-Eur3kA	My profile picture explains everything. Cheerleader of @Team-Eur3kA & @r3kapig	Azeroth	TJU/PKU	50	0	251	205	60	C,Shell,Java,Python,JavaScript,C++	0	0
artkond	cisco-snmp-rce - Cisco IOS 远程代码执行利用程序(CVE-2017-6736 / cisco-sa-20170629-snmp):	https://github.com/artkond/cisco-snmp-rce	None	Penetration Tester https://twitter.com/artkond	None	None	5	0	38	204	3	Python,C	0	0
ustayready	CredKing - 使用 AWS Lambda 轮换 IP 地址进行密码破解的工具:	https://github.com/ustayready/CredKing	None	divergent thinker/breaker and researcher of stuff	None	None	39	0	7	203	7	Python,C#,HTML	724	155
ohjeongwook	sRDI - 用于反射式 DLL 注入的 Shellcode 构造与加载工具:	https://github.com/ohjeongwook/sRDI	https://darungrim.com	Ex-security engineer@Microsoft	None	DarunGrim	25	0	7	203	12	Python,C,C++	291	63
Proteas	带有调试符号的 iOS 11 内核,作者为 Proteas:	https://github.com/Proteas/unstripped-ios-kernels	None	Geek	China	None	35	0	194	203	61	C,Shell,C++	193	44
zjlywjh001	PhrackCTF-Platform-Team: 功能最全的CTF平台	https://github.com/zjlywjh001/PhrackCTF-Platform-Team	https://www.jarviswang.me/		None	None	52	0	5	202	0	C,JavaScript,Java	0	0
rmusser01	Exploit 编写方面的资料整理:	https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Exploit%20Development.md	http://rmusser.net/docs	Contact Me: [email protected]	None	None	119	0	1700	202	30	Python,Lua,C	2000	496
Raikia	CredNinja - 通过 SMB 协议检测账户可用性的工具:	https://github.com/Raikia/CredNinja	https://twitter.com/raikiasec		Dallas, TX	Mandiant	16	0	80	202	4	Python,Lua,PHP,PowerShell,Perl	0	0
anestisb	vdexExtractor - 从 Vdex 文件反编译和提取 Android Dex 字节码的工具:	https://github.com/anestisb/vdexExtractor	https://github.com/CENSUS		Greece	CENSUS S.A. - @CENSUS	23	0	48	200	35	C,Shell,C++,Perl	374	101
cobbr	PSAmsi - 一款审核和击败 AMSI 签名的工具:	https://github.com/cobbr/PSAmsi	https://cobbr.io		Dallas, TX	SpecterOps	17	0	48	198	1	C#,PowerShell	503	79
imWildCat	scylla:一款高质量的免费代理 IP 池工具	https://github.com/imWildCat/scylla	https://github.com/outlook	Software Development Engineer @outlook Mobile team. MSc in Computer Science with Distinction at University of Birmingham.	PRC	@microsoft	81	0	2100	197	56	Python,JavaScript,Swift,Dart	0	0
bkerler	uEmu - 一个 IDA 上基于 Unicorn 引擎的小型模拟器插件:	https://github.com/bkerler/uEmu	https://twitter.com/viperbjk	Reverse Engineer and Data/Crypto Analyst	Germany	RevSkills	314	0	3	197	14	Python,C,C++	530	94
David-Reguera-Garcia-Dreg	anticuckoo - Cuckoo 沙盒检测工具:	https://github.com/David-Reguera-Garcia-Dreg/anticuckoo	http://www.fr33project.org	Senior Malware & Vulnerabillity Researcher ASM, C, C++, x86_64, Research & Development.	Spain	freelance	66	0	28	197	55	C	0	0
smicallef	spiderfoot - 开源情报收集工具:	https://github.com/smicallef/spiderfoot	http://www.binarypool.com		@binarypool	None	1	0	2	195	0	Python	2100	545
gaoyifan	china-operator-ip: 中国运营商IP地址库(每日更新)	https://github.com/gaoyifan/china-operator-ip	http://yfgao.com/		None	USTC	31	0	504	195	49	Go,Shell	0	0
maxchehab	CSS-Keylogging - 巧妙利用 CSS Selector,通过 CSS 偷用户输入的密码:	https://github.com/maxchehab/CSS-Keylogging	https://github.com/workos-inc		nyc	Intern @workos-inc. Person @gu-app-club	88	0	68	194	52	Go,C,JavaScript,CSS	0	0
1522402210	2018 BlackHat 工具列表:	https://github.com/1522402210/2018-BlackHat-Tools-List	None	BlockChain Fans	None	None	570	0	3700	193	1700	Python,Go,HTML,PowerShell,C++	278	108
Metnew	uxss-db - UXSS 漏洞搜集仓库:	https://github.com/Metnew/uxss-db	https://twitter.com/vladimir_metnew		Ukraine, Kiev	None	34	0	296	192	11	Go,HTML,JavaScript	0	0
jaredthecoder	awesome vehicle security :	https://github.com/jaredthecoder/awesome-vehicle-security	https://github.com/knxhx	Research Scientist at Oak Ridge National Lab. Chancellors PhD fellow at UT-Knoxville. Founder of @knxhx, @volhacks, @hackutk.	Knoxville, Tennessee	Oak Ridge National Laboratory	73	0	2200	191	55	Python,C	0	0
ropnop	windapsearch - 通过 LDAP 查询来从 Windows domain 中枚举用户、组信息等的 Python 脚本:	https://github.com/ropnop/windapsearch	None		None	None	24	0	125	187	1	Go,Python,JavaScript	206	43
zeroSteiner	reflective-unloader - 将 ReflectiveDLLInjection 注入的 DLL 还原的工具:	https://github.com/zeroSteiner/reflective-unloader	https://zerosteiner.com/		Cleveland, Ohio	None	64	0	176	186	27	Python,C,Ruby	0	0
TryCatchHCF	PacketWhisper - 通过 DNS 协议泄漏数据的工具:	https://github.com/TryCatchHCF/PacketWhisper	https://github.com/TryCatchHCF	Twitter: @TryCatchHCF	None	None	3	0	5	186	0	Python	796	152
s-matyukevich	raspberry-pi-os - 使用 Linux 内核和 Raspberry Pi 进行操作系统开发的学习指南:	https://github.com/s-matyukevich/raspberry-pi-os	https://www.linkedin.com/in/sergey-matyukevich-340b4b68/		Denver, CO	Altoros	85	0	8	185	0	Go,C,Shell,Vim	6300	466
kpcyrd	Scriptable network authentication cracker	https://github.com/kpcyrd/badtouch	None	/waɪrd/	Hamburg, Germany	None	220	0	660	185	180	Ruby,Assembly,Rust	0	0
9b	chirp - 用于集中化管理 Google Alerts 信息的 GUI 工具:	https://github.com/9b/chirp	https://github.com/blockadeio	Founder of @blockadeio, PDF X-RAY, and @passivetotal. Partner and developer for @NinjaJobs. VP of product for @RiskIQ. Roaster at @splitkeycoffee.	Northern Virginia	9b+	58	0	146	184	14	Python	223	18
blackye	webdirdig: Web敏感目录、信息泄漏批量扫描脚本	https://github.com/blackye/webdirdig	None	Security Researcher , Python Developer	None	Tencent、IQIYI	20	0	83	183	3	Python,Go,C++	133	71
shack2	SNETCracker: Windows平台的弱口令审计工具	https://github.com/shack2/SNETCracker	None		None	None	10	0	4	182	1	C#,JavaScript,Java	285	110
SigPloiter	SigPloiter/GTScan: The Nmap Scanner for Telco	https://github.com/SigPloiter/GTScan	None		None	None	6	0	65	182	108	Python,Java,Perl	528	224
JohnLaTwC	BlueHat 2018 Security workshop 议题公开 :	https://github.com/JohnLaTwC/Bluehat2018GraphWorkshop	https://github.com/JohnLaTwC	@JohnLaTwC Distinguished Engineer and General Manager, Microsoft Threat Intelligence Center	None	Microsoft Corporation	16	0	3	182	1	Python,Visual,HTML,Jupyter	172	37
euske	pyrexecd - Windows 系统上的独立 SSH 服务:	https://github.com/euske/pyrexecd	https://tabesugi.net/	m33p.	Nagano, Japan	None	88	0	12	181	4	Python,TypeScript,Java	0	0
5alt	emu - 基于 unicorn 引擎的代码模拟器:	https://github.com/5alt/emu	None		None	None	32	0	10	180	3	Python,JavaScript	100	22
JusticeRage	FFM - 后渗透辅助工具,基于 Python 实现的 TTY Shell 后门:	https://github.com/JusticeRage/FFM	None		None	None	12	0	14	179	8	Python,YARA,Java	0	0
TunisianEagles	SocialBox - 社交媒体账户密码暴力破解工具:	https://github.com/TunisianEagles/SocialBox	https://github.com/TunisianEagles	Feel Free in an open source world Pentesters / security researchers / Malware lovers ☢ / Tunisia ❤	Tunisia	@TunisianEagles	8	0	8	178	0	Shell	236	76
malchata	yall.js - 高效的 JavaScript Lazy Load 脚本:	https://github.com/malchata/yall.js	https://jeremy.codes	Web developer, speaker, and author.	Saint Paul, MN	None	44	0	63	177	116	HTML,JavaScript,CSS	0	0
Eloston	ungoogled-chromium - 一款增强隐私保护和透明度的定制版 Chromium 浏览器:	https://github.com/Eloston/ungoogled-chromium	None		None	None	25	0	32	176	0	Python,JavaScript,HTML	7200	297
Rev3rseSecurity	WebMap - Nmap XML 报告的 Web 图表显示工具 :	https://github.com/Rev3rseSecurity/WebMap	https://www.youtube.com/rev3rsesecurity		None	None	3	0	2	174	1	Python,Dockerfile	0	0
guanchao	AppProtect: 整理一些app常见的加固方法	https://github.com/guanchao/AppProtect	http://shuwoom.com	专注。	shenzhen	Tencent	12	0	35	171	162	Python,C,Java	0	0
eldraco	Salamandra - 间谍麦克风检测工具:	https://github.com/eldraco/Salamandra	http://researchgate.net/profile/Sebastian_Garcia6		None	CVUT University	34	0	36	171	62	Python,JavaScript,C++	1500	187
13o-bbr-bbq	DeepExploit - 基于机器学习的自动化渗透测试框架:	https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploitA	None	Im an engineer, Machine Learning hacker and CISSP. Speaker at Black Hat Arsenal, DEFCON Demo Labs/AI Village, Pycon, CODE BLUE etc.,	Tokyo, Japan.	None	11	0	20	171	0	Python	804	303
leechristensen	SpoolSample - 通过 MS-RPRN RPC 接口来强制到其他 Windows 主机的身份验证工具:	https://github.com/leechristensen/SpoolSample	http://twitter.com/tifkin_	I like to make computers misbehave	Seattle	None	32	0	37	169	0	C#,Go,C,PowerShell	241	75
maestron	botnets - 僵尸网络恶意软件源码收集仓库:	https://github.com/maestron/botnets	None	Donations (BTC): 1FPZzkoUxe2uXzne4KML6TYzASCieWXS6E	None	None	9	0	10	168	2	C,HTML,PHP,C++	2100	439
jeffzh3ng	惊蛰：一款基于Pocsuite的漏洞扫描系统	https://github.com/jeffzh3ng/InsectsAwake	None	Security Engineer	Zhejiang Hangzhou	None	8	0	91	168	5	Python,Java	0	0
incredibleindishell	利用 Apache Tomcat text interface 部署 war 包的利用脚本:	https://github.com/incredibleindishell/exploit-code-by-me/tree/master/Apache-Tomcat-Text_interface-shell-upload	https://twitter.com/IndiShell1046	Security enthusiast Love to learn Linux, PHP and exploit development	IndiShell Lab	None	115	0	7	168	10	PHP,Java	0	0
audibleblink	gorsh - go 语言编写的反弹 Shell:	https://github.com/audibleblink/gorsh	http://alexflor.es	〉It is a truth universally acknowledged, that a single man in possession of an exploit must be in want of shellz.	New York City	None	79	0	192	168	3	C,Python,C++,Go,Ruby,PowerShell	0	0
0xSobky	Regaxor 正则表达式模糊测试工具介绍:	https://github.com/0xSobky/HackVault/wiki/Regaxor:-Fuzzing-Regexes-for-Fun-and-Not%E2%80%90So%E2%80%90Much-Profit	https://0xsobky.github.io	([].map+0)[9]+([].keys+0)[9]+(top+0)[7]+(typeof!1)[0]+(!0+)[1]+(!1+)[4]+(-{}+)[1]+([].keys+0)[9]+(top+0)[7]+(.fixed+0).slice(9,12)	None	None	12	0	9	167	13	Python,JavaScript	0	0
peterpt	eternal_check - NSA 泄漏的 Eternal 系列漏洞的检测工具:	https://github.com/peterpt/eternal_check	None	This git account will be closed as soon as Microsoft acquire github .	Portugal	None	261	0	26	164	7	Python,Shell,C++,Rust	218	84
skelsec	pypykatz - 纯 Python 实现的 Mimikatz:	https://github.com/skelsec/pypykatz	https://twitter.com/SkelSec		None	None	50	0	17	162	1	Python,Objective-C	0	0
PsychoTea	MeridianJB - iOS 10.x 64-bit 设备越狱项目:	https://github.com/PsychoTea/MeridianJB	https://sparkes.zone	I write a few plugins for Rust, and do some other random things. You might find some of them here.	United Kingdom	None	34	0	0	162	1	C#,Objective-C	0	0
LeonardoNve	edm - HTTP MitM 攻击中感染文件的 POC 项目:	https://github.com/LeonardoNve/edm	None		None	None	26	0	3	162	1	Python	265	139
chrisk44	Hijacker - Aircrack,Airodump,Aireplay,MDK3 以及 Reaver 的图形化 Android 应用:	https://github.com/chrisk44/Hijacker	None		Xanthi, Greece	None	9	0	0	161	0	Shell,Java	0	0
DovAmir	awesome-design-patterns - 优秀软件与架构设计模式资源收集:	https://github.com/DovAmir/awesome-design-patterns	https://twitter.com/turaaaa	Cloud architect , developer, open source advocat	Israel	linkedin.com/in/dovamir	15	0	61	161	4	JavaScript,Java	9400	626
w181496	Web-CTF-Cheatsheet - CTF Web 方向的 CheatSheet:	https://github.com/w181496/Web-CTF-Cheatsheet	https://github.com/DoubleSigma	kaibro @DoubleSigma http://ⓀⒶⒾⒷⓇⓄ。ⓉⓌ	Taiwan	National Taiwan University	27	0	591	160	37	Python,Ruby,C++	652	142
fengxuangit	AutoFuck: 自动识别cms并且加载相关poc自动攻击	https://github.com/fengxuangit/AutoFuck	https://www.fangpianz.com	The reason why a great man is great is that he resolves to be a great man.	China	None	89	0	248	160	33	Python,Shell,PHP,Java	0	0
djhohnstein	.NET Profiler DLL 劫持:	https://github.com/djhohnstein/.NET-Profiler-DLL-Hijack	https://popeax.io	Operator at SpecterOps. Kali Contributor.	Seattle, WA	None	63	0	7	160	3	C#,Go,C,Python,C++	0	0
ivRodriguezCA	decrypt-ios-apps-script - 通过 SSH 到越狱设备的 Python 脚本,可以解密 iOS App 并将其传输到本地机器中:	https://github.com/ivRodriguezCA/decrypt-ios-apps-script	https://github.com/google	[SWE @google] Mobile Security Engineer, Cryptography Enthusiast, Reverse Engineering,  Developer	Mountain View, CA	None	17	0	6	158	5	Python,Objective-C,Ruby,C	0	0
ganlvtech	吾爱破解论坛-爱盘源码	https://github.com/ganlvtech/down_52pojie_cn	https://github.com/eeyes-net		None	@eeyes-net	69	0	295	158	44	TypeScript,AutoHotkey,JavaScript,HTML,Go,PHP	0	0
JLospinoso	memcachedump - 调用 Shodan API 快速导出暴露在公网的 memcached 服务器缓存的所有内容的脚本:	https://github.com/JLospinoso/memcachedump	https://lospi.net	entrepreneur, technologist	Washington, DC	None	58	0	180	158	58	C#,Python,C,C++	0	0
secgroundzero	warberry - 为树莓派设计的渗透测试工具包:	https://github.com/secgroundzero/warberry	None		None	None	10	0	4	157	7	Python,C#,JavaScript,Shell	2100	285
woj-ciech	Daily-dose-of-malware - 从各大平台上收集恶意软件与 C&C 服务器信息的脚本:	https://github.com/woj-ciech/Daily-dose-of-malware	None		None	None	11	0	0	156	0	Python,Go	747	101
odzhan	propagate: PROPagate 代码注入技术示例:	https://github.com/odzhan/propagate	None		None	None	10	0	296	155	0	C,HTML,Assembly	163	51
DavexPro	PocHunter: 调用PoC框架(Beebeeto/PocSuite/TangScan/KsPoc)下的PoC.	https://github.com/DavexPro/PocHunter	https://www.davex.pw/		None	None	27	0	132	155	8	Python,Jupyter	0	0
ZerBea	hcxdumptool - 从无线网络设备捕获数据包的小工具:	https://github.com/ZerBea/hcxdumptool	None		planet Earth (Solar System)	retired	3	0	22	154	0	C	695	162
p3nt4	Invoke-TmpDavFS - 用于创建内存运行的 Webdav 服务器的 PowerShell 模块:	https://github.com/p3nt4/Invoke-TmpDavFS	https://twitter.com/xP3nt4		localhost	None	25	0	259	153	28	C#,JavaScript,PowerShell	0	0
initstring	linkedin2username - 通过 LinkedIn 获取一个公司的人员用户名列表	https://github.com/initstring/linkedin2username	https://initblog.com	Security researcher.	Melbourne, Australia	None	9	0	54	153	3	Python	0	0
gleeda	memtriage - 一款 Windows 内存取证工具:	https://github.com/gleeda/memtriage	https://github.com/volatilityfoundation	Core Developer for the Volatility Project. DFIR enthusiast.	None	@volatilityfoundation	29	0	121	153	38	Python,C,HTML	149	17
tiagorlampert	CHAOS - 生成远程控制 Windows Payload 的 Payload 生成器:	https://github.com/tiagorlampert/CHAOS	https://twitter.com/tiagorlampert	Open source enthusiast, Gopher and Coder. Exploring and learning new things to improve my skills.	Paraná, Brazil	None	10	0	44	152	3	Go,Java,Dart	0	0
emptymonkey	A tool for covert execution in Linux.	https://github.com/emptymonkey/mimic	https://twitter.com/emptymonkey		Water Curtain Cave	None	17	0	105	152	53	C	0	0
Shiva108	Mostly CTF notes	https://github.com/Shiva108/CTF-notes	http://cph-sec.github.io	Ethical Hacker, Penetration Tester, Founder CPH:SEC.	Copenhagen, Denmark	CPH:SEC	31	0	1400	152	487	Shell,HTML,PHP	0	0
sevagas	macro_pack - 用于生成 Office 宏恶意文档的工具:	https://github.com/sevagas/macro_pack	http://blog.sevagas.com	I decided to create this Github along by blog to share my experimentations in the information security field.	None	None	5	0	52	150	0	Python,Shell	554	152
anbai-inc	AttackFilter: Logstash 日志安全攻击分析插件	https://github.com/anbai-inc/AttackFilter	http://www.anbai.com	Hello world~	Beijing	Anbai	11	0	1	150	0	Python,Ruby,Java	708	242
maddiestone	IDAPythonEmbeddedToolkit - 用于自动化分析嵌入式设备固件的 IDAPython 脚本:	https://github.com/maddiestone/IDAPythonEmbeddedToolkit	http://twitter.com/maddiestone		None	None	3	0	2	149	1	Python	425	88
rianhunter	Wasmjit - 一款适用于 Linux 内核模式的 WebAssembly Runtime 工具:	https://github.com/rianhunter/wasmjit	http://thelig.ht/		San Francisco	None	24	0	0	148	16	Python,C++	0	0
quentinhardy	msdat - Microsoft SQL Server 数据库攻击工具:	https://github.com/quentinhardy/msdat	None		None	None	10	0	27	148	0	Python,C++	0	0
entropy1337	自动化无线攻击工具 Infernal-Wireless 发布了第三版:	https://github.com/entropy1337/infernal-twin	None		None	None	82	0	19	148	10	Python,C,PHP,HTML	969	237
toniblyx	my-arsenal-of-aws-security-tools - 开源 AWS 安全工具列表:	https://github.com/toniblyx/my-arsenal-of-aws-security-tools	https://github.com/toniblyx	Hardening for food. Twitter @toniblyx	Atlanta	None	44	0	33	147	7	Shell	0	0
WalkingCat	SymDiff - 用于比较 PDB 文件中的符号不同的工具:	https://github.com/WalkingCat/SymDiff	None		None	None	10	0	43	146	33	C#,C++	56	8
Cryin	GitLab web hooks SSRF(CVE-2018-8801) Patch analysis and How to safely fix SSRF	https://github.com/Cryin/Paper/blob/master/GitLab%20web%20hooks%20SSRF(CVE-2018-8801)%20Patch%20analysis%20and%20How%20to%20safely%20fix%20SSRF.md	https://cryin.github.io/	Enjoy programming. Write some interesting programs！	None	None	8	0	237	146	70	Python,PHP,C++	253	90
RASSec	A_Scan_Framework: 互联网漏洞管理、资产管理、任务扫描系统	https://github.com/RASSec/A_Scan_Framework	None	Security Analyst Researcher	None	None	18	0	0	144	0	Python,JavaScript	0	0
adi0x90	Resources to help get started with IoT Pentesting	https://github.com/adi0x90/IoT-Pentesting-Methodology	https://github.com/attify		San Francisco	@attify - IoT and Mobile Security	18	0	10	142	1	Python,Shell	413	81
wetw0rk	Sickle - shellcode 辅助开发工具:	https://github.com/wetw0rk/Sickle	None	hax0r boi	None	None	7	0	76	141	41	Python,Assembly,Java	404	68
thewhiteh4t	seeker - 获取高精度地理信息和设备信息的工具:	https://github.com/thewhiteh4t/seeker	https://www.linkedin.com/in/lohityapushkar	The Best Offense is a Great Defense...	New Delhi	None	8	0	11	141	2	Python,C++	0	0
wupco	weblogger: 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具	https://github.com/wupco/weblogger	None	{{1+1}}	None	None	19	0	184	140	87	Python,Shell,PHP	298	72
8enet	Charles 破解工具	https://github.com/8enet/Charles-Crack	https://blog.zzzmode.com	Android	Shanghai, China	None	41	0	214	140	14	Kotlin,Java	0	0
vletoux	SmbScanner - 用于扫描 SMB 支持版本的 PowerShell 脚本:	https://github.com/vletoux/SmbScanner	https://www.pingcastle.com	Security ninja trying to do on the CISO side what red teamers do for years (you know me for dcsync, setntlm, DCShadow & pingcastle)	France	Ping Castle	22	0	2	138	0	C#,PowerShell,C++	216	29
jiangsir404	记录自己对《代码审计》的理解和总结	https://github.com/jiangsir404/Audit-Learning	http://blog.s7star.cn	Talk is cheap, show me the code.	None	None	15	0	225	137	116	Python	517	109
xuechiyaobai	360 研究员 BoAAAAA 新公开了几个 V8 近期修复漏洞的 PoC 和 Exploit(CVE-2017-15399/CVE-2017-15428/CVE-2017-5070):	https://github.com/xuechiyaobai/V8_November_2017	None		None	None	22	0	143	135	25	C,HTML,JavaScript,C++	108	30
houjingyi233	office-exploit-case-study Office 漏洞利用与分析练手数据集	https://github.com/houjingyi233/office-exploit-case-study	http://houjingyi233.com	security researcher wechat:aG91amluZ3lpMTU5	None	None	20	0	713	135	1	Visual,Java,C++	124	56
M4cs	BabySploit Beginner Pentesting Framework Written in Python	https://github.com/M4cs/BabySploit	https://github.com/Reggora	QA Automation Engineer for @Reggora , Python Full Stack Developer	Boston, Massachusetts	@Reggora	82	0	48	135	54	Python,Objective-C,HTML,Perl	0	0
abhisek	Exploitation challenges for CTF	https://github.com/abhisek/pwnworks	https://github.com/appsecco	Technology enthusiast	Bangalore, India	@appsecco	17	0	24	134	4	C,Shell,Ruby,HCL,C++	98	60
dreadl0ck	dreadl0ck/netcap: A framework for secure and scalable network traffic analysis	https://github.com/dreadl0ck/netcap	https://github.com/desertbit	Tortures computers for fun and profit. Interested in network security monitoring, machine learning, Go and Rust. Shellscript ninja. $> Will debug for food	Amsterdam	@desertbit @bestbytes @foomo	26	0	487	133	17	Go,Python	0	0
olafhartong	sysmon-modular - Sysmon 配置文件收集仓库:	https://github.com/olafhartong/sysmon-modular	http://olafhartong.nl		The Netherlands	None	47	0	60	132	4	Python,Shell,Batchfile,PowerShell,HTML	0	0
ggerganov	kbd-audio - 通过麦克风来捕获和分析键盘输入的工具 :	https://github.com/ggerganov/kbd-audio	https://github.com/viewray-inc	https://wave-share.com	Sofia, Bulgaria	@viewray-inc	20	0	37	132	3	C++	0	0
cookieY	Yearning: 基于Inception的可视化Web端SQL审核平台	https://github.com/cookieY/Yearning	None	var me coder = Henry	Hangzhou	Closeli	14	0	17	132	0	Shell,Vue,HTML,Rust	2100	814
al0ne	LinuxCheck: linux信息搜集脚本	https://github.com/al0ne/LinuxCheck?from=timeline	None	入侵检测/流量分析/应急溯源	china	None	6	0	511	132	173	Shell,Vim	146	27
6IX7ine	djangohunter: identify incorrectly configured Django applications	https://github.com/6IX7ine/djangohunter	https://github.com/6IX7ine	Brazilian player. Cyber Security research, Infosec, Writer, Hacker / Full Stack Developer 🌌	São Paulo, Brazil	@6IX7ine	145	0	189	132	191	Python,JavaScript	0	0
rezasp	joomscan - OWASP Joomla 漏洞扫描器:	https://github.com/rezasp/joomscan	https://github.com/OWASP	@OWASP Leader	Iran	@OWASP	9	0	18	131	5	Python,Perl	0	0
platomav	MEAnalyzer - 英特尔引擎固件分析工具: https://github.com/platomav/MEAnalyzer	https://github.com/platomav/MEAnalyzer	None	Hardware & firmware hobbyist, developer of ME Analyzer & MC Extractor, admin of win-raid.com	None	None	5	0	39	131	5	Python	0	0
cryptax	androidre - 一款用于安卓逆向工程的 Docker 镜像:	https://github.com/cryptax/androidre	None		None	None	21	0	9	131	2	Python,Dockerfile,CSS	0	0
oddcod3	Phantom-Evasion: Python AV evasion tool capable to generate FUD executable	https://github.com/oddcod3/Phantom-Evasion	None	Like Jon Snow I know nothing	Arezzo IT	None	1	0	386	130	174	Python	0	0
kkirsche	Weblogic wls-wsat 组件反序列化漏洞(CVE-2017-10271)的利用脚本:	https://github.com/kkirsche/CVE-2017-10271	https://deceiveyour.team	Security Architect, Penetration Tester, and Exploit Developer #OSCP, #OSWP, #OSCE	::1	Verizon	388	0	390	130	32	Go,Python,JavaScript,Ruby	0	0
prateek147	Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable.	https://github.com/prateek147/DVIA-v2	http://highaltitudehacks.com		New Delhi, India	None	26	0	12	129	6	Python,Objective-C,Swift	342	71
nongiach	arm_now - 基于 qume 环境快速搭建各种 CPU 架构虚拟机的工具:	https://github.com/nongiach/arm_now	None	@chaignc on twitter	None	None	29	0	78	129	50	Python,C,Assembly	509	71
Nekmo	dirhunt - 通过爬虫的方式收集 WEB 路径的工具:	https://github.com/Nekmo/dirhunt	http://nekmo.com	Creating software with love for more than 10 years	Málaga, Spain	Nekmo Com	103	0	330	128	23	Python,CSS	0	0
DormyMo	SpiderKeeper: scrapy爬虫框架的管理界面	https://github.com/DormyMo/SpiderKeeper	http://www.7mdm.com		hangzhou	None	29	0	595	128	27	Python,HTML	0	0
v-p-b	WindowsDefenderTools - 用于对 Windows Defender mpengine.dll 进行逆向工程的工具:	https://github.com/v-p-b/WindowsDefenderTools/tree/recreate	http://blog.silentsignal.eu		None	Silent Signal	48	0	118	127	40	Python,Java,Ruby,PowerShell	69	26
sashs	Exploitation on arm based systems, ARM 系统的漏洞利用开发:	https://github.com/sashs/arm_exploitation/blob/master/exploitation_on_arm_based_systems.pdf	https://scoding.de		None	None	6	0	78	127	6	Python,Ruby	782	140
LinusHenze	一个仍存在于最新版 Safari 中的 0day 漏洞及利用(已经在 WebKit 中修复):	https://github.com/LinusHenze/WebKit-RegEx-Exploit	None		Germany	None	4	0	0	127	0	C,JavaScript,Objective-C	313	85
rebeyond	Behinder: “冰蝎”动态二进制加密网站管理客户端	https://github.com/rebeyond/Behinder/releases	None		None	None	8	0	3	125	0	Python,C,Java	480	109
ihack4falafel	Capcom.sys 本地提权漏洞 EXP:	https://github.com/ihack4falafel/OSEE/tree/master/Kernel%20Exploitation/Capcom	http://ihack4falafel.github.io	Low level shenanigans...	EIP	None	12	0	117	124	0	Python,C#,C,Assembly	0	0
zricethezav	gitleaks - 从整个 git 仓库的历史中搜寻敏感数据的工具:	https://github.com/zricethezav/gitleaks	https://github.com/GannettDigital		None	@GannettDigital	34	0	568	123	94	Go,Python,Vim	0	0
sgayou	针对医疗设备 Smiths Medical Medfusion 4000 的远程代码执行漏洞分析:	https://github.com/sgayou/medfusion-4000-research/blob/master/doc/README.md	None	8)	None	None	6	0	2	123	9	Python,Assembly	0	0
changeofpace	VivienneVMM - 基于 VT-x HyperVisor的调试框架 ,可以在用户态设置被调试对象不可感知的硬件断点:	https://github.com/changeofpace/VivienneVMM	None	Reverse engineering, windows internals, and hypervisors.	None	None	14	0	108	123	25	C,C++	0	0
MattPD	C++ 调试相关优秀资源收集:	https://github.com/MattPD/cpplinks/blob/master/debugging.md	None		None	None	22	0	2100	123	124	C,HTML,C++	1600	188
debasishm89	dotNetFuzz - 针对 .NET 对象序列化和反序列化的 fuzz 工具:	https://github.com/debasishm89/dotNetFuzz	http://www.debasish.in/	Information Security Enthusiast. https://twitter.com/debasishm89	None	None	18	0	8	122	0	Python	89	34
merrychap	shellen - 交互式 shellcode 开发环境:	https://github.com/merrychap/shellen	https://github.com/VoidHack	, Developer , CTF player (voidka / VoidHack) , Security enthusiast , Keen interest in RE and PWN	In the wires	@VoidHack	20	0	917	121	99	Python,C	0	0
clong	detect-responder - 用于检测 Responder 的 osquery 扩展组件:	https://github.com/clong/detect-responder	https://twitter.com/Centurion		United States	None	15	0	20	121	2	Python,HTML,PowerShell	0	0
se55i0n	DBScanner: 自动扫描内网常数据库脚本未授权访问及常规弱口令检测	https://github.com/se55i0n/DBScanner	None	web security	None	None	10	0	12	119	12	Python	0	0
dbohdan	structured-text-tools - 可用来操纵结构化文本(CSV, XML, HTML, JSON...)的命令行工具清单:	https://github.com/dbohdan/structured-text-tools	http://dbohdan.com/		None	None	35	0	699	119	1	Go,Python,Tcl,Haskell,HTML	0	0
a13xp0p0v	linux-kernel-defense-map - Linux 内核防御图:	https://github.com/a13xp0p0v/linux-kernel-defence-map/blob/master/README.md	https://twitter.com/a13xp0p0v	Linux Kernel Developer & Security Researcher	None	None	5	0	0	119	3	Python,Go,C,HTML	436	44
bitsadmin	nopowershell - C# 实现的类 PowerShell 工具:	https://github.com/bitsadmin/nopowershell	None		Netherlands	None	9	0	4	118	0	C#,Python,Visual,Batchfile	0	0
admintony	SvnExploit支持SVN源代码泄露全版本Dump源码	https://github.com/admintony/svnExploit	None		None	None	34	0	22	118	0	Python,C++	259	81
NickstaDB	用于漏洞概念验证的利用及工具:	https://github.com/NickstaDB/PoC	https://www.cognitous.co.uk/	Security researcher, exploit developer, pentester, and founder of Cognitous Cyber Security.	United Kingdom	Cognitous Cyber Security	16	0	14	118	3	Python,Shell,Java	327	62
0xbadjuju	Tokenvator - 操作 Windows Tokens 进行提权的工具:	https://github.com/0xbadjuju/Tokenvator	None		None	None	22	0	28	118	0	C#,PowerShell	509	118
stayliv3	embedded-device-lab：利用qemu模拟物联网漏洞的测试环境	https://github.com/stayliv3/embedded-device-lab	http://xdxd.love/	http://xdxd.love	china	None	104	0	619	117	296	Python,Shell,Ruby,PHP	63	31
SkewwG	VulScan: 漏洞扫描：st2、tomcat、未授权访问等	https://github.com/SkewwG/VulScan	None		None	None	22	0	49	117	0	Python	168	54
thundernet8	StarCabinet: 开源的跨平台Github Stars管理分析工具	https://github.com/thundernet8/StarCabinet	None	for(;;)Study;	Shanghai, China	None	79	0	982	116	58	TypeScript,JavaScript	0	0
arkadiyt	aws_public_ips - 一款用于抓取所有与用户 AWS 账户相关的服务器公网 IP 地址的工具:	https://github.com/arkadiyt/aws_public_ips	https://arkadiyt.com		San Francisco, CA	None	21	0	16	116	0	Ruby	0	0
christophetd	CloudFlair - 使用来自 Censys 的互联网扫描数据查找使用 CloudFlare 的网站的原始服务器的工具:	https://github.com/christophetd/CloudFlair	http://christophetd.fr		Switzerland	None	64	0	402	115	38	Python,Lua,Visual,Shell	0	0
ezelf	CVE-2018-9995_dvr_credentials: Get DVR Credentials	https://github.com/ezelf/CVE-2018-9995_dvr_credentials	http://misteralfa-hack.blogspot.com.ar		Buenos Aires	Alfa Security	15	0	4	114	3	Python,Lua	357	140
Igglybuff	awesome-piracy : A curated list of awesome warez and piracy links:	https://github.com/Igglybuff/awesome-piracy	None		None	None	4	0	900	114	10	Python,Shell,HTML	6100	504
thehappydinoa	iOSRestrictionBruteForce - 基于 Python 实现的 iOS 访问限制密码破解工具:	https://github.com/thehappydinoa/iOSRestrictionBruteForce	https://aidan.davisholland.com/	Student, Developer, Researcher, and Collaborator	Washington, DC	None	85	0	727	113	75	Python,Shell	0	0
snoopysecurity	awesome-burp-extensions - 优秀 Burp 扩展收集:	https://github.com/snoopysecurity/awesome-burp-extensions	None	Sam S	None	None	14	0	121	112	20	Python,PHP,PowerShell	0	0
sigalor	whatsapp-web-reveng - WhatsApp Web 端的逆向分析结果,对 API 进行了完整的介绍:	https://github.com/sigalor/whatsapp-web-reveng	None		Munich, Germany	None	11	0	24	112	0	Python,JavaScript,C++	0	0
raphaelsc	Am-I-affected-by-Meltdown - Meltdown 漏洞检测工具,目前只支持 Linux:	https://github.com/raphaelsc/Am-I-affected-by-Meltdown	http://raphaelsc.github.io/	a.k.a. utroz	Brazil - Belo Horizonte	ScyllaDB	36	0	78	112	48	C,C++	0	0
leeqwind	CVE-2018-8120 Windows 本地提权漏洞 POC:	https://github.com/leeqwind/HolicPOC/blob/master/windows/win32k/CVE-2018-8120/x86.cpp	https://xiaodaozhi.com	:)zZ	None	None	14	0	744	112	147	C,Assembly,C++	58	34
harleyQu1nn	AggressorScripts - Cobalt Strike 3.0+ 的 Aggressor 脚本收集仓库:	https://github.com/harleyQu1nn/AggressorScripts	http://harleyqu1nn.com	Red Teamer/Penetration Tester @r3dQu1nn	None	None	26	0	66	112	11	C#,Python,PowerShell	0	0
mschwager	0wned -通过Python安装包执行代码:	https://github.com/mschwager/0wned	None		None	None	36	0	248	111	48	Python,Go	811	101
SadProcessor	查询 MITRE ATT&CK 数据库的 PowerShell 脚本发布:	https://github.com/SadProcessor/SomeStuff/blob/master/PoSh_ATTCK.ps1	None		None	None	7	0	3	111	0	PowerShell	163	42
kmkz	渗透测试备忘单:	https://github.com/kmkz/Pentesting/blob/master/Pentest-cheat-sheet	http://www.linkedin.com/in/jean-marie-bourbon		Grevenmacher (LU)	None	11	0	21	110	12	Python,Assembly,PowerShell,Perl	0	0
cisp	AccessLogAnylast: 支持Nginx、Apache、Tomcat等标准WEB日志的分析	https://github.com/cisp/AccessLogAnylast	http://www.cnblogs.com/KevinGeorge/	Information Security Engineer in a Number Security Company！ SCU Graduates！	四川成都	None	21	0	0	110	114	Python	0	0
Wenzel	r2vmi - 一款 Hypervisor 级的调试器 :	https://github.com/Wenzel/r2vmi	None	Security Researcher , VMI hypervisor-level debugger	Paris, France	None	83	0	178	110	75	Python,Ruby	0	0
unprovable	PentestHardware - 硬件渗透测试手册:	https://github.com/unprovable/PentestHardware	https://unprovable.github.io	Hacker and Mathematician Former Pentester (CTM) and now full time Ph.D. in Mathematical Logic in Leeds and Security Consultant and Researcher in Berlin	None	None	47	0	353	108	30	C,Shell,C++	359	58
s1kr10s	Apache-Struts-v3 - ST2 漏洞利用工具:	https://github.com/s1kr10s/Apache-Struts-v3	https://github.com/s1kr10s	Youtube: https://www.youtube.com/user/dthhack Twitter: @s1kr10s	anonima	Exploiting	48	0	0	108	0	Shell,Java,Python,PHP,PowerShell,HCL	196	57
maxmcd	WebTTY - 一款通过 WebRTC 共享终端会话的工具:	https://github.com/maxmcd/webtty	http://maxmcd.com		Brooklyn, NY	None	136	0	235	106	44	Go,JavaScript,Dockerfile,HCL,Rust	0	0
emposha	PHP-Shell-Detector - 由 PHP 编写的识别php/cgi/asp/aspx webshell 的工具:	https://github.com/emposha/PHP-Shell-Detector	http://www.emposha.com		Israel	None	14	0	24	106	10	Python,PHP,JavaScript	597	205
deroko	SPPLUAObjectUacBypass: 通过 SPPLUAObject 设置注册表键值触发 UAC 绕过:	https://github.com/deroko/SPPLUAObjectUacBypass	http://deroko.phearless.org		None	None	19	0	6	106	7	Python,C,Assembly	118	20
deepzec	Grok-backdoor - 使用 Ngrok 隧道进行通信的简易 Python 后门:	https://github.com/deepzec/Grok-backdoor	https://www.linkedin.com/in/deeputv/	Sr Security Consultant/Security Architect/Security Researcher/Sr Security Analyst/Pentester	None	None	26	0	42	106	46	Python,Shell,PowerShell	0	0
convisoappsec	firefox_tunnel - 使用 Firefox 做隐藏通信隧道绕过防火墙限制的POC :	https://github.com/convisoappsec/firefox_tunnel	https://www.conviso.com.br		Brazil, Curitiba-PR	Conviso Application Security S/A	27	0	3	106	0	C,Python,JavaScript,Perl,PHP,Ruby	60	13
speed47	Spectre & Meltdown 漏洞 Linux 操作系统检测工具:	https://github.com/speed47/spectre-meltdown-checker	None		None	None	18	0	18	105	0	C#,Shell,PHP,C++,Perl	2800	378
prsecurity	Neutrino - Neutrino C2 源码:	https://github.com/prsecurity/Neutrino	http://www.prsecurity.org	Pentester, mostly.	Los Angeles, CA	None	26	0	16	104	6	Go,PHP,Jupyter,ActionScript	47	16
danigargu	explodingcan - IIS WebDav 远程溢出漏洞利用程序(CVE-2017-7269):	https://github.com/danigargu/explodingcan	https://twitter.com/danigargu		Spain	None	14	0	183	104	27	Python,JavaScript	447	54
a2u	Drupalgeddon 2 漏洞利用脚本(CVE-2018-7600):	https://github.com/a2u/CVE-2018-7600	https://rudnkh.me		Russia	None	15	0	125	104	11	Python,CSS	0	0
smgorelik	VBScript 远程代码执行漏洞 POC(CVE-2018-8174):	https://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript	None		None	None	9	0	3	103	3	C#,Visual,C++	465	127
p1r06u3	phishing: The Security Practices of Party A Phishing	https://github.com/p1r06u3/phishing	http://pirogue.org		None	None	35	0	210	103	5	Python,HTML,PHP	244	98
n4xh4ck5	CMSsc4n - 探测网站使用的 CMS 的工具:	https://github.com/n4xh4ck5/CMSsc4n	https://twitter.com/@n4xh4ck5		fwhibbit.es	None	30	0	0	103	9	Python	89	28
blacknbunny	peanalyzer - 便携式可执行文件分析和反汇编工具:	https://github.com/blacknbunny/peanalyzer	https://blacknbunny.github.io/	筑路工人 17 y/o Youtube : http://tiny.cc/2y944y https://twitter.com/0DAYanc	None	None	20	0	15	103	3	Python,HTML	0	0
alpha1e0	kiwi：一款源代码安全审计工具	https://github.com/alpha1e0/kiwi	http://alpha1e0.github.io	The quieter you become, the more you are able to hear.	Hangzhou. China	None	9	0	123	103	6	Python,JavaScript,Java,CSS	377	216
payatu	Foxit Reader CPDF_Parser::m_pCryptoHandler UAF 漏洞(CVE-2018-14442)PoC:	https://github.com/payatu/CVE-2018-14442	None		None	None	9	0	0	101	0	Python,C,HTML,Java	401	128
HanseSecure	如何使用 ExploitDev 进行网络应用的模糊测试: https://hansesecure.de/howto-exploitdev-fuzzing/ GitHub:	https://github.com/HanseSecure/ExploitDev	https://github.com/HanseSecure	Father, Hacker, Consultant, Pentester, Researcher, Student, Exploits, OffsecDev, InfoSec & CyberCyber - https://hansesecure.de/impressum/	Germany	@HanseSecure	27	0	7	101	4	Shell,Assembly,Python,C++,Go,PowerShell	133	36
mxmssh	drltrace - 用于 Windows 和 Linux 应用程序的库调用跟踪器:	https://github.com/mxmssh/drltrace	https://twitter.com/MShudrak	Senior Offensive Security Researcher	San Francisco	Salesforce	19	0	68	100	4	Python,C,HTML	0	0
PinkP4nther	Sutekh - Linux rootkit 样例,普通用户权限通过后门获取 root shell:	https://github.com/PinkP4nther/Sutekh	https://pinkysplanet.net/	Break all the things! Twitter: @Pink_P4nther	None	None	19	0	9	99	12	Python,C,Assembly,Rust	0	0
Nhoya	gOSINT: OSINT Swiss Army Knife	https://github.com/Nhoya/gOSINT/	https://bsod.dev	Security Researcher and Developer	Rome, Italy	None	25	0	26	99	6	Go,Python,Shell,CSS	0	0
Hyperparticle	修改一个像素,迫使深度神经网络得出错误的图片分类结果,这个 Repo 是 One pixel attack for fooling deep neural networks Paper 的代码实现:	https://github.com/Hyperparticle/one-pixel-attack-keras	https://twitter.com/hyperparticle	Machine Learning, NLP, and Graph Databases. I love a fresh challenge—be it a math problem, a physics puzzle, or programming quandary.	Boise, Idaho, United States	Boise State University	20	0	345	99	42	Python,C#,Jupyter	0	0
GraxCode	GraxCode/ReverseCrypt: Extract Crypted Jar Archives	https://github.com/GraxCode/ReverseCrypt	None	Computer Security Researcher	None	None	10	0	4	99	0	Java	0	0
yassineaboukir	asnlookup.py - 用于搜索特定组织的 ASN 和拥有的 IP 地址工具:	https://github.com/yassineaboukir/asnlookup	https://www.yassineaboukir.com	Hacker	Airports	None	14	0	29	98	1	Python,Go,JavaScript,Java	0	0
theevilbit	绕过驱动签名强制检测,来自 DEFCON 26:	https://github.com/theevilbit/workshops/blob/master/DSE%20Bypass%20Workshop/dc26%20-%20Csaba%20Fitzl%20-%20DSE%20Bypass%20Workshop%20-%20Presentation.pdf	None		None	None	17	0	37	98	4	Python,C,C++	144	54
j3ssie	Osmedeus - 渗透测试中的自动侦察和扫描工具:	https://github.com/j3ssie/Osmedeus	https://twitter.com/j3ssiejjj	I like abusing features	None	None	19	0	7	98	0	Python	0	0
enkomio	.NET 运行时插桩工具:	https://github.com/enkomio/shed	None	Code Monk - twitter.com/s4tan	Italy	Enkomio Ltd	16	0	63	98	5	C#,F#	0	0
alevchuk	vim-clutch - 为提升 Vim 编码速度而生的 USB 电子脚踏板改造之旅:	https://github.com/alevchuk/vim-clutch	https://twitter.com/alevchuk		Menlo Park, CA	Facebook	32	0	43	98	6	Python,Shell,Ruby,Perl	2800	55
CaiJiJi	VulScritp: 内网渗透脚本	https://github.com/CaiJiJi/VulScritp	None		Earth	@Caijijijijijiji	90	0	773	98	55	Python,C,HTML,PowerShell,CSS	106	210
jollheef	LibreOffice 远程任意文件泄漏漏洞披露(CVE-2018-6871):	https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure	https://seccomp.ru	read-write mirror for code.dumpstack.io	Saint Petersburg, Russia	None	35	0	299	96	26	Go,C,Java,CSS	0	0
Arvanaghi	CheckPlease - 通过 PowerShell、Python、Go、Ruby、C 和 Rust 等语言编写的对抗沙盒分析的模块 :	https://github.com/Arvanaghi/CheckPlease	http://twitter.com/arvanaghi	Blockchain security.	New York City	None	12	0	35	96	9	Go,Python,C,PowerShell	0	0
omg2hei	MiningGitlog: 采集Github仓库mail地址	https://github.com/omg2hei/MiningGitlog/	None		None	None	49	0	918	95	185	Python,HTML,JavaScript	52	12
mbechler	serianalyzer: A static byte code analyzer for Java deserialization gadget	https://github.com/mbechler/serianalyzer	https://mbechler.github.io/		Germany	None	5	0	0	95	0	HTML,Java	0	0
chengdedeng	Web Application Firewall or API Gateway(应用防火墙/API网关)	https://github.com/chengdedeng/waf	https://www.yangguo.info	知易行难	Beijing/Shanghai china	None	21	0	289	95	13	Rust,TypeScript,Java,PHP,C++	0	0
NeatMonster	AMIE - 用于对ARM架构指令及寄存器提示的 IDA 插件:	https://github.com/NeatMonster/AMIE	https://neat.sh/	Security research by day, tools and plugins development by night.	Toulouse, France	None	15	0	34	95	3	Python,Java	0	0
lmy375	awesome-vmp - 虚拟机分析相关资料收集:	https://github.com/lmy375/awesome-vmp	None		None	None	16	0	116	94	18	Python,C++,CSS	402	117
lanrat	certgraph - 爬取 SSL 证书中的 Alternate 名称并生成有向图的工具:	https://github.com/lanrat/certgraph	https://lanrat.com	Hacker, Programer, Student, Geek	None	/dev/null	72	0	511	94	153	Go,Python,C,SourcePawn,Java	114	16
gabemarshall	microctfs - 小型 CTF 比赛的 docker 镜像:	https://github.com/gabemarshall/microctfs	http://gabemarshall.me	Red Teamer ,, Penetration Tester	Chapel Hill, NC	None	40	0	41	94	7	Python,JavaScript,Ruby,CSS	326	92
sagishahar	lpeworkshop - Windows / Linux 本地提权 Workshop:	https://github.com/sagishahar/lpeworkshop	None		None	None	5	0	28	93	0	Python,C#,Batchfile,PowerShell	751	200
parsiya	Golang for Security Professionals	https://github.com/parsiya/Hacking-with-Go	https://parsiya.net	Application security engineer, Gopher and n00b reverser.	169.254.0.1	Electronic Arts	48	0	517	93	59	Go,JavaScript,HTML,CSS	0	0
nshalabi	ATTACK-Tools - MITRE ATT&CK 框架实用套件:	https://github.com/nshalabi/ATTACK-Tools	http://nosecurecode.com	Information Security Manager, Programmer, Data Architect. Follow me @nader_shalabi and http://nosecurecode.com	World wide	nosecurecode.com	3	0	59	92	2	Java,PLpgSQL	433	89
likexian	likexian/stathub-go: A smart Hub for holding server Stat	https://github.com/likexian/stathub-go	https://www.likexian.com/	Hello World!	Shenzhen, China	None	14	0	146	92	76	Go,PHP	574	114
agustingianni	symrepl - 读取二进制文件符号信息的工具:	https://github.com/agustingianni/symrepl	https://gruba.blogspot.com	Programmer, vulnerability researcher, and what not.	San Marino	None	27	0	376	92	201	Python,C++	56	14
FortuneC00kie	bug-monitor: Seebug、structs、cve漏洞实时监控推送系统	https://github.com/FortuneC00kie/bug-monitor	https://github.com/alipay	May the Force be with you :)	Hangzhou, China	@alipay	77	0	971	92	205	Python,PHP,JavaScript,HTML	0	0
DominicBreuker	pspy - 无需 root 权限的 linux 进程监视器:	https://github.com/DominicBreuker/pspy	None		Berlin	None	61	0	98	92	16	Python,Go,Shell,Java	0	0
stevespringett	Dependency-Track：第三方库漏洞检测工具	https://github.com/stevespringett/dependency-track	http://stevespringett.com/	I build stuff, I break stuff, I develop stuff to protect stuff.	Chicago	None	20	0	70	91	1	Java,XSLT	0	0
avlidienbrunn	BountyDash - 一款结合所有漏洞赏金平台奖励的工具,让使用者对进度和漏洞挖掘类型有更好的把握:	https://github.com/avlidienbrunn/bountydash	https://twitter.com/avlidienbrunn	addasdsasa %PDF adsdasdasdsadsa asdsdsa	o	%PDF <>test	14	0	11	91	5	Python,Shell,JavaScript	94	16
sneakerhax	Runbooks - 各个方向的安全技术收集:	https://github.com/sneakerhax/Runbooks	https://sneakerhax.com		None	None	15	0	228	90	0	Python,Dockerfile,Ruby	0	0
ashutosh1206	Crypton - 用于学习攻击/防御性密码学的项目:	https://github.com/ashutosh1206/Crypton	https://github.com/teambi0s	(s0rc3r3r) CTF player @teambi0s, interested in cryptography and system security, organising team InCTF and InCTFj, security enthusiast	None	None	11	0	31	90	14	Python	0	0
0xAlexei	WindowsDefenderTools - 对 Windows Defender mpengine.dll 进行逆向工程所开发的工具:	https://github.com/0xAlexei/WindowsDefenderTools	https://twitter.com/0xAlexei		None	None	10	0	18	90	0	Python,C,JavaScript,Java	179	34
BuffaloWill	oxml_xxe - 将 XXE/XML 漏洞利用嵌入到不同文件类型的工具:	https://github.com/BuffaloWill/oxml_xxe	https://www.silentrobots.com		None	None	12	0	36	89	1	JavaScript,Ruby	0	0
trufae	forkless - 为 iOS 编写的第三方 fork 库:	https://github.com/trufae/forkless/	http://www.radare.org/		None	None	55	0	19	88	2	Objective-C,JavaScript,Makefile,C	106	7
MrSqar-Ye	wpCrack - wordpress hash 破解脚本:	https://github.com/MrSqar-Ye/wpCrack	http://sys-crashers.com	17 Y/O Independent security researcher , Web developer , Linux lov3r ...and more	Yemen,Al Jawf	SysteM CrasherS	8	0	7	88	1	PHP	233	85
Marten4n6	EvilOSX - macOS 系统远控木马:	https://github.com/Marten4n6/EvilOSX	None	In password reuse we trust.    Im compromised on failure to authenticate with the following key: 0xC24FF3269458716A	None	None	3	0	17	88	2	Python	0	0
tlkh	Prowler - 一款基于 Raspberry Pi Cluster 的网络漏洞扫描工具:	https://github.com/tlkh/prowler	https://github.com/NVIDIA	I do code stuff @NVIDIA @NVAITC	Singapore	Singapore University of Technology and Design	70	0	380	87	132	Python,JavaScript,Jupyter,HTML	0	0
MojtabaTajik	Robber - 用于查找易受 DLL 劫持的可执行文件的工具:	https://github.com/MojtabaTajik/Robber	http://mojtabatajik.github.io/	Programmer and security researcher experienced in Delphi/C++/C#/Python, Reverse Engineering and hardware design	Tehran, Iran	None	17	0	52	87	23	C#,Pascal,PowerShell,C++	0	0
0xa-saline	Logpara: 一个对常见的Web日志进行解析处理的粗糙DEMO	https://github.com/0xa-saline/Logpara	http://0cx.cc		None	http://0day5.com	31	0	750	86	118	Python,C,HTML,CSS	38	19
rand0m1ze	ezsploit - Metasploit 的 Linux 自动化脚本:	https://github.com/rand0m1ze/ezsploit	None		None	None	9	0	3	85	2	C#,Visual,Shell	168	71
externalist	exploit_playground - 针对几个 iOS 及 Android 漏洞的分析:	https://github.com/externalist/exploit_playground	None		None	None	7	0	3	85	0	Python,C,JavaScript	556	98
Naetw	CTF-pwn-tips - CTF PWN 方向的技巧总结:	https://github.com/Naetw/CTF-pwn-tips	None		Hsinchu/Taiwan	None	17	0	133	85	34	Python,HTML,C++	0	0
malcomvetter	CertCheck - 在 C++ 和 C# 语言中以编程方式访问 TLS 证书链的例子:	https://github.com/malcomvetter/CertCheck	http://medium.com/@malcomvetter		None	None	37	0	81	84	0	C#,C++	106	23
Green-m	Green-hat-suite: meterpreter免杀工具	https://github.com/Green-m/green-hat-suite	https://green-m.github.io/	AV Evasion, Reverse, Metasploiter https://keybase.io/green_m	None	None	21	0	236	84	38	Python,C,Shell,Ruby	0	0
patois	IDACyber - 用于 IDA Pro 的数据可视化插件:	https://github.com/patois/IDACyber	None	Yo, was github?	127.0.0.1	None	31	0	232	83	47	Python,C,C++	182	19
francisck	DanderSpritz_lab - 方程式组织的 DanderSpritz 工具研究测试环境:	https://github.com/francisck/DanderSpritz_lab	None		Denver, CO	None	6	0	60	83	8	Python,C,HTML	321	72
decoder-it	通过指定父进程的方式获得 SYSTEM 权限: https://decoder.cloud/2018/02/02/getting-system/ GitHub:	https://github.com/decoder-it/psgetsystem	None		None	None	10	0	1	82	0	C#,PowerShell,C++	144	52
vincentcox	StaCoAn - 跨平台的移动端应用静态代码审计工具:	https://github.com/vincentcox/StaCoAn	https://www.linkedin.com/in/ivincentcox/	vincentcox.com	Belgium	None	7	0	145	80	15	Shell,JavaScript,PowerShell	0	0
Gbps	Gbhv - 一款简单的 x86-64 VT-x Hypervisor ,帮助学习使用和开发 VT-X 硬件虚拟化技术:	https://github.com/Gbps/gbhv	http://www.ctf.re/	I do security things.	Carnegie Mellon University	None	20	0	37	80	15	Python,C,CSS,C++	0	0
hausec	ADAPE-Script - 活动目录自动化安全评估与权限提升脚本:	https://github.com/hausec/ADAPE-Script	https://hausec.com	script kiddie extraordinaire	None	@haus3c	1	0	73	79	1	PowerShell	661	120
dirtyfilthy	freshonions-torscraper: TOR spider / hidden service onion crawler	https://github.com/dirtyfilthy/freshonions-torscraper	None		None	None	26	0	18	79	1	Python,Java,C,Ruby	212	77
tehnokv	作者利用约 200 行 JS 代码实现面部识别:	https://github.com/tehnokv/picojs	https://tehnokv.com		None	None	2	0	0	78	0	C,HTML	4700	321
bigric3	Windows 本地提权漏洞利用程序(cve-2018-8120):	https://github.com/bigric3/cve-2018-8120	None		None	None	17	0	20	77	7	C,HTML,C++	0	0
OneLogicalMyth	Windows 提权 0day 漏洞的vPowerShell 例子:	https://github.com/OneLogicalMyth/zeroday-powershell	https://glanfield.co.uk		None	None	27	0	55	77	11	Python,Shell,PowerShell	0	0
HynekPetrak	javascript-malware-collection - JavaScript 恶意代码样本收集仓库:	https://github.com/HynekPetrak/javascript-malware-collection	None		Czech Republic	None	15	0	1500	77	24	C#,Python,C,JavaScript	280	89
lgeek	在 ARM 平台上利用 Meltdown 漏洞从用户态 Dump SYSTEM 寄存器:	https://github.com/lgeek/spec_poc_arm	None		Manchester, UK	None	57	0	13	76	8	C,Shell	222	65
Quickbreach	ExchangeRelayX - 针对 Exchange EWS 接口的 NTLM relay 工具:	https://github.com/Quickbreach/ExchangeRelayX	https://github.com/quickbreach	An infosec security researcher & penetration tester. Reach me on twitter @quickbreach	None	None	6	0	0	76	0	Python,JavaScript,Dockerfile,PowerShell	326	73
ChrisTheCoolHut	Zeratool - 自动化生成漏洞利用并寻找 Flag 的 CTF 比赛工具:	https://github.com/ChrisTheCoolHut/Zeratool	None		None	None	14	0	96	76	4	Python,C	353	61
yellowbyte	汇编语言逆向工程手册:	https://github.com/yellowbyte/reverse-engineering-reference-manual	https://twitter.com/YellowbyteRE	Wannabe Reverse Engineer	Boston	None	6	0	255	75	21	Python	0	0
ls0f	gortcp: 内网穿透、远程文件上传下载、命令执行	https://github.com/ls0f/gortcp	None		None	None	27	0	673	75	72	Python,Go,HTML	0	0
dschadow	Java-Web-Security 安全书籍	https://github.com/dschadow/Java-Web-Security	https://github.com/bridgingIT	Senior Consultant @bridgingIT, author (Java-Web-Security book, articles), speaker, secure development advocate, @jcryptool project lead.	Stuttgart, Germany	@bridgingIT	13	0	10	75	1	Java	0	0
smiegles	certs - 解析 X509 证书并从中提取子域名的工具:	https://github.com/smiegles/certs	https://www.zerocopter.com/		Netherlands	Zerocopter	7	0	211	74	7	Go,JavaScript,Ruby,CSS	0	0
nezza	SDQAnalyzer - Saleae Logic 分析器的 SDQ 协议分析插件:	https://github.com/nezza/SDQAnalyzer	http://stacksmashing.net/		Germany	None	33	0	25	74	9	Python,JavaScript,C++	0	0
moneyDboat	2018达观杯文本智能处理挑战赛 Top10解决方案	https://github.com/moneyDboat/data_grand	None	NLP, Machine Learning	beijing, China	字节跳动 ai lab	17	0	229	74	22	Python,HTML,Jupyter	260	111
glinares	CSCGuard - 保护并记录 .NET CSC.exe 和运行时C# 编译的可疑以及恶意用法:	https://github.com/glinares/CSCGuard	None		None	None	3	0	0	74	1	C#	104	25
deralexxx	security-apis - 安全相关服务的公共 JSON API 收集列表:	https://github.com/deralexxx/security-apis	https://alexanderjaeger.de	Writes, bash, python, and some more. Interested in Security and APIs	None	None	78	0	124	74	35	Python	0	0
findneo	tombkeeper 教主微博语录	https://github.com/findneo/TKposts	http://findneo.github.io		None	None	16	0	653	73	108	Python	0	0
clr2of8	SlackExtract - 用于下载用户 slack 的所有文件,消息和用户配置文件的 PowerShell 脚本:	https://github.com/clr2of8/SlackExtract	https://twitter.com/OrOneEqualsOne		None	None	29	0	0	73	0	Python,PowerShell	0	0
WazeHell	PE-Linux - Linux 提权辅助脚本:	https://github.com/WazeHell/PE-Linux	https://wazehell.io	Hossam, researcher with pharaonic roots :)	Istanbul	None	13	0	35	73	7	Python,Lua,Shell,HTML	0	0
userlandkernel	Sem Voigtländer 公开其发现的 iOS 中各种漏洞,包括(Writeup、POC、Exploit):	https://github.com/userlandkernel/plataoplomo	https://github.com/Fontys-Hogeschool-ICT	Im a Software Engineering and Cybersecurity student at @Fontys-Hogeschool-ICT I research MACH, Darwin and LowLevel System Security. Mainly intrested in iOS.	Eindhoven, Netherlands	@UKERN-Developers	33	0	48	72	11	HTML,C,Shell,Objective-C	0	0
omergunal	CryptoPot：Simple cryptocurrency mining honeypot	https://github.com/omergunal/CryptoPot	https://ogunal.com		Turkey	None	16	0	50	72	13	Python,HTML	0	0
JiounDai	Jianjun Dai 及 Guang Gong 公布了本月 Android 安全公告中 Android 蓝牙组件多个漏洞 POC(CVE-2018-9356/7/8/9、CVE-2018-9360/1、CVE-2018-9381):	https://github.com/JiounDai/Bluedroid	https://twitter.com/jioun_dai	twitter/weibo: @Jioun_dai	None	None	13	0	0	72	0	Python,Swift,C,Java	150	35
Cybereason	Invoke-WMILM - 通过 WMI 实现认证后的远程命令执行的工具:	https://github.com/Cybereason/Invoke-WMILM	None		None	None	4	0	0	72	0	Python,C,Assembly,PowerShell	184	50
romanzaikin	Check Point 安全团队对 WhatsApp 即时聊天应用的漏洞挖掘详情: https://research.checkpoint.com/fakesapp-a-vulnerability-in-whatsapp/BurpExtension-WhatsApp-Decryption-CheckPoint - BurpSuite WhatsApp 协议解密扩展:	https://github.com/romanzaikin/BurpExtension-WhatsApp-Decryption-CheckPoint	https://twitter.com/R0m4nZ41k1n	Cyber Security Researcher	Israel	Check Point Software Technologies	11	0	18	71	0	Shell,HTML,Python,JavaScript,Batchfile,PHP	345	103
chryzsh	DarthSidious - 域环境渗透测试实验室:	https://github.com/chryzsh/DarthSidious/	None	hacking AD	None	None	8	0	976	71	6	C#,PowerShell,CSS	301	82
TingGe	Norse - IPViking Map 源码改进与解析	https://github.com/TingGe/data-visualization/tree/master/ipviking	https://github.com/nefe	JS/DevOps/PMP/ Agile/WoT/ @nefe /@clientlabs / @uplaydotcc	None	Alibaba	22	0	967	71	84	Shell,JavaScript	121	45
iceyhexman	onlinetools: 线上工具箱开源	https://github.com/iceyhexman/onlinetools	https://www.hexlt.org	excited!	None	None	21	0	87	70	10	Python,JavaScript,Ruby	499	159
almandin	fuxploider - 文件上传漏洞扫描和利用工具:	https://github.com/almandin/fuxploider	https://github.com/Acceis		None	@Acceis	1	0	8	70	3	Python	0	0
GerbenJavado	LinkFinder - 从 JavaScript 文件中提取 URL 及其参数的 Python 脚本:	https://github.com/GerbenJavado/LinkFinder	None		None	None	3	0	18	68	0	Python,HTML	664	157
tarunkant	Gopherus - 利用 SSRF 漏洞攻击内部服务的 gopher 链接生成工具:	https://github.com/tarunkant/Gopherus	https://github.com/teambi0s	(SpyD3r) Web Security Enthusiast @teambi0s , CTF Player , B.Tech 3rd year CSE , Organiser of InCTF & InCTFj , Bug Hunter ,	Amrita University, Amritapuri	None	22	0	19	67	3	Python,PHP	0	0
renatahodovan	fuzzinator - 模糊测试框架:	https://github.com/renatahodovan/fuzzinator	None		Szeged	SZTE	15	0	194	67	7	Python,ANTLR	141	29
paboldin	Meltdown Exploit PoC:	https://github.com/paboldin/meltdown-exploit	None		Ukraine	CloudLinux	39	0	4	67	0	Python,C	0	0
m8r0wn	enumdb - 暴力破解 MySQL/MSSQL 并在成功后自动提取数据库敏感信息的工具:	https://github.com/m8r0wn/enumdb	https://blog.m8r0wn.com	Pentester , Open-source developer , Bug bounty hunter	127.0.0.1	None	11	0	35	67	11	Python,HTML	0	0
anandtiwarics	archerysec - 开源漏洞评估和管理工具,以帮助开发人员和测试人员执行扫描和管理漏洞:	https://github.com/anandtiwarics/archerysec	https://github.com/archerysec	Information Security enthusiast Project Leading @archerysec	Bangalore	None	36	0	95	67	14	Python,JavaScript	0	0
abhi-r3v0	Adhrit - Android APK 逆向分析工具:	https://github.com/abhi-r3v0/Adhrit/	https://github.com/NeonSecOfficial	HawkSpawn , Android Security Enthusiast , Indian , Co-Founder @NeonSecOfficial , CTF @teambi0s , Amrita Viswa Vidyapeetham	Mysuru	@NeonSecOfficial @teambi0s	66	0	212	67	15	Python,Java,Erlang,CMake	0	0
v1cker	src_edu: edu站点及其对应的子域名	https://github.com/v1cker/src_edu	None		cn	None	471	0	751	66	249	Python,C#,PHP,CSS	65	22
s3inlc	hashtopolis - 一个多平台C/S架构工具,用于将 hashcat 任务分发给多台计算机进行密码破解:	https://github.com/s3inlc/hashtopolis	https://hashes.org	Computer Science Student, University of Basel	Switzerland	None	20	0	21	66	2	Python,PHP,C++	0	0
malwareinfosec	EKFiddle - 基于 Fiddler Web 调试器的框架,用于研究漏洞工具包 、恶意广告、流量:	https://github.com/malwareinfosec/EKFiddle	None		None	None	1	0	0	66	0	C#	383	93
dukebarman	awesome-radare2 - Radare2 提供支持的优秀项目、文章等资源收集仓库:	https://github.com/dukebarman/awesome-radare2	https://twitter.com/dukebarman	Security REsearcher	None	None	39	0	479	66	72	C,Dockerfile	0	0
benoitjadinon	awesome-xamarin - 用于 Xamarin 移动项目的优秀资源收集仓库:	https://github.com/benoitjadinon/awesome-xamarin	https://earn.com/benoitjadinon/	Xamarin & Flutter fanboi, xennial from Planet Earth	Belgium	RiseUp	86	0	645	66	161	Swift,Dart	0	0
Jsitech	Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer	https://github.com/Jsitech/JShielder	http://www.jasonsoto.com	IT Security Professional , Information Security Manager , Security+ , SSCP , Pentester	None	None	24	0	12	66	3	Shell,PHP	0	0
realoriginal	reflective-rewrite - Reflective DLL Injection 项目的二次开发,相比原项目更加隐蔽:	https://github.com/realoriginal/reflective-rewrite	http://twitter.com/ilove2pwn_	Whelp, not sure what to put here, but, hello. i <3 windows.	None	None	7	0	95	65	9	C,PowerShell	86	23
erpscanteam	SAP NetWeaver AS JAVA CRM 的日志注入远程命令执行漏洞 PoC(CVE-2018-2380):	https://github.com/erpscanteam/CVE-2018-2380	https://github.com/erpscan		None	@erpscan	6	0	0	65	0	Python,C	44	16
a0xnirudh	kurukshetra - 学习安全编码的 Web 框架:	https://github.com/a0xnirudh/kurukshetra	https://blog.0daylabs.com		India	https://blog.0daylabs.com	44	0	54	65	23	Python,PHP,JavaScript,HTML	115	13
71src	第一届爱奇艺安全沙龙 议题PPT	https://github.com/71src/iqiyi_security_conference_2018	None	IQIYI Security Response Center	None	None	2	0	0	65	0	Python	74	23
jx-sec	JXWAF(锦衣盾)：基于openresty(nginx+lua)开发的下一代web应用防火墙	https://github.com/jx-sec/jxwaf	None	摸鱼	None	None	4	0	17	64	0	Python,Lua,C,Shell	468	135
felixgr	secure-ios-app-dev - iOS 应用安全开发指南:	https://github.com/felixgr/secure-ios-app-dev	https://github.com/google	information security engineer	Switzerland	@google	3	0	142	64	2	Python	0	0
blue-bird1	metasploit-cn-wiki: 一些metasploit的中文文档	https://github.com/blue-bird1/metasploit-cn-wiki	https://github.com/Earth-Online	@Earth-Online	None	None	7	0	906	64	165	C	0	0
Srinivas11789	PcapXray - 网络取证工具,用于可视化展示网络通信详情:	https://github.com/Srinivas11789/PcapXray	http://srinivas11789.github.io	Love building/breaking things --> Code ,, Test, Plan, Break, Debug (Loop!)	City of Angels	None	58	0	118	64	14	Python	0	0
IVMachiavelli	Links for the OSINT Team	https://github.com/IVMachiavelli/OSINT_Team_Links	https://openosint.signup.team	Techie who loves all things Linux, infosec, OSINT and admin of the Open OSINT Team, join us https://openosint.signup.team	Earth!	None	31	0	82	64	25	Go,JavaScript	223	48
fgeek	pyfiscan - Web 应用漏洞与版本扫描工具:	https://github.com/fgeek/pyfiscan	https://github.com/nixu-corp		Finland	@nixu-corp	2	0	60	63	21	Python	313	74
cornerpirate	一个在内存中下载,编译和执行 Java 文件的 POC :	https://github.com/cornerpirate/java-stager	https://www.twitter.com/cornerpirate	A penetration tester with a focus on collecting data, manipulating that, and generating kick ass reports.	None	Xcina Consulting	19	0	15	62	18	Python,Batchfile	0	0
wstart	DB_BaseLine: 数据库基线检查工具	https://github.com/wstart/DB_BaseLine	https://github.com/wstart		GD	free	51	0	277	61	54	Python,Go,C,PHP	93	26
nopernik	mpDNS - Python 实现的多功能 DNS 服务器:	https://github.com/nopernik/mpDNS	http://www.korznikov.com		Israel	None	28	0	6	61	0	Python,C#,Ruby	346	40
mtivadar	windows10_ntfs_crash_dos - 特殊构造的 NTFS 镜像可导致多个版本的 Windows 崩溃,POC:	https://github.com/mtivadar/windows10_ntfs_crash_dos	https://twitter.com/tivadarmmt		Romania	None	5	0	53	61	6	Python,TeX,Verilog	581	144
ALEXZZZ9	索尼 PS4 5.01 WebKit Exploit PoC:	https://github.com/ALEXZZZ9/PS4-5.01-WebKit-Exploit-PoC	https://ax9.me/		None	None	4	0	542	61	11	C#,JavaScript	0	0
yrp604	atc-sources -《A Guide To Kernel Exploitation: Attacking the Core》书籍相关源码:	https://github.com/yrp604/atc-sources	None		Vancouver, BC	None	32	0	76	60	0	C,C++	702	39
kacperszurek	从 JetBrains IDE 提取服务器的密码,利用这些密码通过 Metasploit 控制服务器:	https://github.com/kacperszurek/pentest_teamcity	None		None	None	9	0	3	60	0	Python,PHP,Ruby,PowerShell	144	38
ecx86	tcpbin - 记录 TCP Socket 详细日志的工具:	https://github.com/ecx86/tcpbin	None	i do the static analysis	None	None	28	0	90	60	43	Python,Java,C++	0	0
cryps1s	DARKSURGEON - 用于事件响应,数字取证,恶意软件分析和网络防御的 Windows 虚拟机: https://medium.com/@cryps1s/darksurgeon-a-windows-10-packer-project-for-defenders-1a57759856b6GitHub:	https://github.com/cryps1s/DARKSURGEON	https://twitter.com/cryps1s	DFIR @ Palantir , Windows Security Fanboy , #Ethereum , All views are my own, not my employer	None	Palantir	9	0	97	60	24	HTML,PowerShell	382	56
anatolikalysch	VMAttack - 通过动静态分析,反混淆基于虚拟化实现的二进制加壳,papaer: https://www1.cs.fau.de/filepool/publications/unpacking-dynamic-static.pdfGitHub:	https://github.com/anatolikalysch/VMAttack	https://cs1.cms.rrze.uni-erlangen.de/person/anatoli-kalysch/		Nuremberg	Friedrich-Alexander-Universität Erlangen-Nürnberg	11	0	9	60	4	Python,Java	0	0
vaguileradiaz	tinfoleak - 开源 Twitter 情报分析工具:	https://github.com/vaguileradiaz/tinfoleak	http://vicenteaguileradiaz.com		None	None	1	0	1	59	0	Python	0	0
gyoisamurai	GyoiThon - 基于机器学习的渗透测试工具:	https://github.com/gyoisamurai/GyoiThon	None	Were Black Hat Arsenal presenter.	None	None	2	0	4	59	0	Python	449	176
Rizer0	Log-killer: Clear all your logs in [linux/windows] servers	https://github.com/Rizer0/Log-killer	https://killshot-sec.com	Security Researcher / Developer From	Syria,Homs	System Crashers	4	0	14	59	1	PHP	0	0
invictus1306	ARM shellcode and exploit development, ARM 上的 ShellCode 编写与漏洞利用开发:	https://github.com/invictus1306/Workshop-BSidesMunich2018/blob/master/workshop_slides.pdf	https://twitter.com/invictus1306		Italy	None	12	0	0	58	0	Python,C,CSS,C++	0	0
giovanifss	Gitmails - 收集 git commit 中 email 信息的工具:	https://github.com/giovanifss/Gitmails	https://twitter.com/g1ov4z	Infosec	None	None	19	0	45	58	31	Python,Shell,Haskell,Ruby	0	0
ercoppa	symbolic-execution-tutorial - 基于 angr 框架的符号执行教程:	https://github.com/ercoppa/symbolic-execution-tutorial/blob/master/symbolic-execution.pdf	https://github.com/season-lab	PostDoc	Rome	Sapienza University of Rome, @season-lab	17	0	16	58	1	Python,Shell,C,HTML	401	189
tijme	graphwave - 用于检测相似 URL 路径的 BurpSuite 插件:	https://github.com/tijme/graphwave	https://tij.me/	Information Security and Software Development. #Android, #iOS & #Web	The Netherlands	None	15	0	83	57	6	Python,Java,Objective-C,Swift,TeX	0	0
RootUp	BFuzz - 一款基于 Domato 的浏览器 Fuzz 工具:	https://github.com/RootUp/BFuzz	http://www.inputzero.io	Tweet me @RandomDhiraj	Internet	None	16	0	3	57	0	Python,JavaScript,HTML,Ruby,PowerShell	206	34
xxxyanchenxxx	SigKill: 一键绕过App签名验证	https://github.com/xxxyanchenxxx/SigKill	None		None	None	58	0	29	56	1	C,Java,Smali	0	0
starjun	openstar: 基于OpenResty的WAF功能	https://github.com/starjun/openstar	None		None	None	63	0	66	56	6	Lua,C	694	294
shirosaidev	sharesniffer - 自动化网络共享收集工具:	https://github.com/shirosaidev/sharesniffer	https://www.linkedin.com/in/chris-park-shirosaidev/	software developer , sysadmin	Kyoto, Japan	None	12	0	17	56	0	Python,PHP	0	0
r0hi7	BinExp - Linux 二进制漏洞利用教程:	https://github.com/r0hi7/BinExp	https://github.com/walmartlabs	OSCP certified Security Enthusiast and a geeky python developer post graduated from IITK (System Security)	None	@walmartlabs	37	0	86	56	13	Python,C,Shell	0	0
nmulasmajic	CVE-2018-8897 - POP/MOV SS 漏洞检测工具:	https://github.com/nmulasmajic/CVE-2018-8897	http://www.triplefault.io		None	None	2	0	3	56	0	C++	97	25
eladshamir	Internal-Monologue - 在不触碰 LSASS 的情况下抓取 NTLM Hashes 的攻击方式:	https://github.com/eladshamir/Internal-Monologue	https://eladshamir.com	Managing Security Consultant at The Missing Link , Co-founder of Shenanigans Labs	Sydney, Australia	The Missing Link Security	3	0	1	56	2	C#,Python	666	147
V-E-O	libmpeg2 堆缓冲区越界写漏洞 POC (CVE-2018-9341):	https://github.com/V-E-O/PoC/tree/master/CVE-2018-9341	None		None	None	59	0	43	55	45	C,Makefile	0	0
ParsingTeam	RedLogin - SSH 暴力破解工具:	https://github.com/ParsingTeam/RedLogin/	https://github.com/ParsingTeam	Email: [email protected] Telegram: @ParsingTeam	Iran	None	11	0	2	55	0	C#,Python	71	21
HA71	WhatCMS - 依据 Whatcms.org 提供的 API 编写的 CMS 检测与利用工具:	https://github.com/HA71/WhatCMS	http://underc0de.org		Hagakure	None	5	0	1100	55	103	Python,Shell	0	0
Col-E	Recaf - 基于 Objectweb ASM 的易于使用的 Java 字节码编辑器:	https://github.com/Col-E/Recaf/tree/3599f7a077d1d0f24ce0a1414af3948555185b99	None	Java enthusiast. Discord: Col-E#6255	None	None	18	0	252	55	15	Java	546	69
samhaxr	hackbox - 优秀渗透测试技术与工具的整合:	https://github.com/samhaxr/hackbox	https://www.sulemanmalik.com		United Kingdom	None	159	0	4	54	19	Python,Shell,JavaScript	0	0
pornin	CTTK - 常量执行时间代码片段收集,这些代码用来参考编写可以防御侧信道攻击的加解密代码:	https://github.com/pornin/CTTK	None		None	None	5	0	0	54	0	C#,C	0	0
maxking	linux-vulnerabilities-10-years - 一篇对 Linux 十年来的内核漏洞,缓解措施以及开放问题的研究论文 :	https://github.com/maxking/linux-vulnerabilities-10-years	https://asynchronous.in	I also have code over at https://gitlab.com/maxking	None	None	109	0	170	54	26	Python,TeX,Dockerfile,SaltStack	0	0
l0ss	Grouper - 用于寻找活动目录组策略漏洞的 PowerShell 脚本:	https://github.com/l0ss/Grouper	None		None	None	36	0	2	54	0	C#	0	0
its-a-feature	Apfell - macOS 后渗透测试工具:	https://github.com/its-a-feature/Apfell	None		None	None	88	0	6	54	0	JavaScript	0	0
abaykan	CrawlBox - Web 目录暴力破解工具:	https://github.com/abaykan/crawlbox	https://github.com/c0delatte	Mukhammad Akbar , Indonesia	Indonesia	@c0delatte	27	0	45	54	11	Python,PHP,HTML	0	0
TheSecondSun	Bashark - 纯 Bash 实现的后渗透测试工具:	https://github.com/TheSecondSun/Bashark	None		Warsaw, Poland	None	4	0	110	54	11	Python,Shell	370	57
theLSA	千倍速一句话密码爆破工具	https://github.com/theLSA/awBruter	http://www.lsablog.com	I like network security,penestration and programming(python,c/c++,php,java,ect),welcome to communicate with me!	China	None	24	0	12	53	5	Python	63	33
Dviros	RAT-via-Telegram - 利用 Telegram 进行 C&C 通信的 Windows 远程控制工具:	https://github.com/Dviros/RAT-via-Telegram	https://www.linkedin.com/in/dviros/	alert(bio)	None	None	122	0	108	53	31	Shell,Python,JavaScript,C#,Go,PowerShell	0	0
wzw19890321	Apple Safari WebKit RCE exp (CVE-2018-4192):	https://github.com/wzw19890321/Exploits/blob/master/CVE-2018-4192/CVE-2018-4192.html	None		BeiJing	Qihoo	64	0	5	52	11	C,C++	24	10
azizaltuntas	Pymap-Scanner - Python Scanner with	https://github.com/azizaltuntas/Pymap-Scanner	None	#Expl[]iting Human Vulnerability	TURKEY	Free	8	0	0	52	0	Python,CSS	0	0
TestingPens	MalwarePersistenceScripts - 恶意软件持久化操作脚本:	https://github.com/TestingPens/MalwarePersistenceScripts	None	Pentest monkey, cryptocurrency enthusiast and malware researcher https://twitter.com/TestingPens	None	None	8	0	3	52	1	Go,Python,PowerShell,C++	94	13
riverloopsec	tumblerf - RF 射频系统 fuzz 测试框架:	https://github.com/riverloopsec/tumblerf	http://riverloopsecurity.com		None	None	6	0	1	50	0	Python,C,IDL	385	138
pstirparo	mac4n6 - Mac OS X 与 iOS 数字取证分析中的重点路径收集:	https://github.com/pstirparo/mac4n6	None		None	None	16	0	331	50	33	Python	174	27
needmorecowbell	sniff-paste - 针对 Pastebin 的开源情报收集工具:	https://github.com/needmorecowbell/sniff-paste	http://adammusciano.com	Sharing is a moral imperative	Pittsburgh, Pennsylvania	Inquest	68	0	458	50	34	Python,YARA,C++	0	0
kai5263499	一份关于 OSX 和 iOS 的安全资源集合:	https://github.com/kai5263499/osx-security-awesome	https://github.com/manwe-io		Atlanta, GA	@manwe-io	193	0	1000	50	50	Go,Java	0	0
wsxarcher	Chimay-Red - 来自 Vault 7 CIA 泄漏的 Mikrotik 漏洞利用 POC:	https://github.com/wsxarcher/Chimay-Red	http://wsx.re	Security aficionado.	Berlin	SECRET STARTUP	18	0	148	49	63	Python,C,Shell,JavaScript	22	10
shirkdog	Xorg 提权漏洞(CVE-2018-14655)分析与利用:	https://github.com/shirkdog/CharmBUG/blob/master/Presentations/XorgandFunWithLocalRootPrivileges-112818.pdf	https://www.daemon-security.com	I work with open source security tools, network and host based intrusion detection and prevention systems, and network security monitoring (SIEM).	US	Daemon Security	25	0	16	49	0	Shell,Perl	259	96
s3team	VMHunt - 用于分析虚拟化二进制代码的工具集:	https://github.com/s3team/VMHunt	None		None	None	8	0	2	49	0	OCaml,C++	124	39
nbulischeck	tyton - Linux 内核模式下的 Rootkit 检测工具:	https://github.com/nbulischeck/tyton	https://github.com/CUCyber	Kernel-mode developer and CTF fanatic. Former President of Clemson University Cyber Security.	None	@CUCyber	10	0	16	49	9	Python,C	0	0
kozmic	laravel-poc-CVE-2018-15133 - Laravel APP_KEY 泄露导致的远程代码执行 POC:	https://github.com/kozmic/laravel-poc-CVE-2018-15133	https://twitter.com/kozmic/	Software developer and security enthusiast. I enjoy football, beer and snowboarding.	Oslo, Norway	None	49	0	1400	49	41	JavaScript,Dockerfile	136	11
axt	angr-utils - angr 二进制分析框架的辅助程序,包含 CFG 可视化:	https://github.com/axt/angr-utils	None		None	None	8	0	123	49	66	Python,JavaScript,Java	108	23
CS-Tao	GTD-Visualization: 全球恐怖袭击数据可视化系统	https://github.com/CS-Tao/GTD-Visualization	https://home.cs-tao.cc/	A student in School of Remote Sensing and Information Engineering, Wuhan University, working on GWModel and GIS.	Wuhan · China	Wuhan University	25	1	95	49	19	C#,Python,Vue,JavaScript	74	14
ryanries	PassFiltEx - 活动目录环境下的密码过滤器,用于避免域用户使用弱密码:	https://github.com/ryanries/PassFiltEx	http://myotherpcisacloud.com	Escalation Engineer @ Microsoft But these are just my personal toys.	Texas	myotherpcisacloud.com	22	0	8	48	3	C#,C,C++	677	28
r3dxpl0it	Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021 - Apache Superset pickle 库代码执行漏洞 POC:	https://github.com/r3dxpl0it/Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021	https://github.com/freelancer	New Git After Years In Bucket My public codes are about ❌ Exploits + PoC 🔒 Cyber Security 💻 ML and Deep-Learning, Computation and Python	Italy	@0day.today @freelancer	24	0	11	48	30	Python	0	0
MarkPKCollier	神经图灵机 NTM 的实现(Paper) : https://arxiv.org/abs/1807.08518Code:	https://github.com/MarkPKCollier/NeuralTuringMachine	https://www.linkedin.com/in/mark-collier-aa446032/	Computer Science student at Trinity College Dublin. Interested in deep learning.	Dublin, Ireland	Mark Collier	9	0	0	48	0	Python	0	0
51x	WHP - 攻击 Windows 环境的工具包:	https://github.com/51x/WHP	None	Unconditional.	interwebz	None	20	0	11	48	3	Python,Shell,HTML	376	117
crazywa1ker	从0开始你的域渗透之旅	https://github.com/crazywa1ker/DarthSidious-Chinese	None		None	None	5	0	138	47	7	C,JavaScript,Ruby	267	47
atmoner	atmoner/nodeCrypto: Ransomware written in NodeJs	https://github.com/atmoner/nodeCrypto	https://twitter.com/atmon3r		France	None	50	0	58	47	23	Python,PHP,HTML,C++	0	0
UltimateHackers	Cloak - 在 Python 脚本中注入隐藏后门的工具:	https://github.com/UltimateHackers/Cloak	None	This profile has been moved to: https://github.com/s0md3v	None	None	0	0	0	47	0		0	0
TheM4hd1	JCS - Joomla 组件漏洞扫描器:	https://github.com/TheM4hd1/JCS	None	IOS Mobile Developement (Swift) / Desktop Application Developement (C#) / Web Application Pentester	Tehran, Iran	None	8	0	101	47	3	C#,Swift	0	0
sycurelab	DECAF - 基于 QEMU 的二进制分析平台:	https://github.com/sycurelab/DECAF	None		None	None	2	0	0	46	0	C	377	128
securing	使用 DumpsterDiver 寻找文件中的密钥泄露: https://medium.com/@rzepsky/hunting-for-secrets-with-the-dumpsterdiver-93d38a9cd4c1GitHub:	https://github.com/securing/DumpsterDiver	https://www.securing.pl		None	None	7	0	3	46	0	Python,JavaScript,Swift	342	96
hegusung	RPCScan - 可与 RPC 服务通信并检查 NFS 共享错误配置的工具:	https://github.com/hegusung/RPCScan	https://twitter.com/hegusung		Behind you	None	14	0	19	46	0	Python,JavaScript	264	54
ewhitehats	InvisiblePersistence - 隐藏注册表中的启动项键值:	https://github.com/ewhitehats/InvisiblePersistence	None		None	None	2	0	1	46	0	C++	222	44
brompwnie	uitkyk - 自定义 Android Frida 库,用于分析 Android 应用程序的恶意行为:	https://github.com/brompwnie/uitkyk	https://twitter.com/brompwnie	Keyboard wrangler ⌨️	None	None	16	0	9	46	10	Shell,Java,C++,Go,Smali,CSS	0	0
RanchoIce	通过 DirectX Kernel 的漏洞获得系统权限,来自 腾讯湛泸实验室:	https://github.com/RanchoIce/44Con2018/blob/master/44Con-Gaining%20Remote%20System%20Subverting%20The%20DirectX%20Kernel.pdf	https://twitter.com/RanchoIce	Researcher of Tencent Security ZhanluLab	None	ZhanluLab	60	0	0	46	11	Objective-C,Ruby,PowerShell,C++	19	12
wavestone-cdt	wavecrack - 调用 Hashcat 进行密码破解的 Web 操作接口:	https://github.com/wavestone-cdt/wavecrack	http://www.wavestone.com	Projects from the auditors and consultants from Wavestones Cybersecurity & Digital Trust practice	None	Wavestone	8	0	0	45	1	Python,Ruby,PowerShell	161	43
dchrastil	ScrapedIn：A tool to scrape LinkedIn without API restrictions for data reconnaiss	https://github.com/dchrastil/ScrapedIn	None	red-team hacker	None	None	6	0	11	45	1	Python,JavaScript,PowerShell	428	62
crsftw	list of useful commands, shells and notes related to OSCP	https://github.com/crsftw/OSCP-cheat-sheet	None		None	None	22	0	5	45	3	Python,C,Shell,PHP	8	8
OmerYa	Invisi-Shell - 绕过所有安全防护隐藏 PowerShell :	https://github.com/OmerYa/Invisi-Shell	None	Endpoint Team Lead at Symantec	None	Javelin Networks	3	0	0	45	0	C#,C,C++	370	57
Eterna1	Puszek - Linux kernel module rootkit:	https://github.com/Eterna1/puszek-rootkit	http://eternal.red		None	None	12	0	252	45	51	Python,C	138	27
vmiklos	针对 Open Document Format(ODF) 的数字签名工具:	https://github.com/vmiklos/odfsig	https://vmiklos.hu/		Budapest, Hungary	None	70	0	41	44	3	Python,C,C++	0	0
gpoguy	GetVulnerableGPO - 用于寻找不安全的 GPO 组策略配置的 PowerShell 脚本:	https://github.com/gpoguy/GetVulnerableGPO	https://sdmsoftware.com	Darren is CTO & Founder of SDM Software, Inc and the community site gpoguy.com, focused on Group Policy, DSC and config mgmt for Windows.	San Francisco Bay Area	SDM Software, Inc.	3	0	0	44	0	C#,PowerShell	131	18
Markus-Go	bonesi - 在实验环境下模拟 DDoS 攻击流量的工具:	https://github.com/Markus-Go/bonesi	http://www.goldiges.de/		None	None	7	0	0	44	0	C,Java,C++	339	112
xwings	The #HITB2018DXB CTF hardware hacking challenge simple write-up	https://github.com/xwings/ctf.hitb2018dxb	http://theshepherdlab.io	theshepherdlab.io, Fouder. A Research Lab Fully 0wn3d by JD.COM	None	None	8	0	10	43	2	Python,C,Makefile	14	12
x1mdev	ReconPi - 树莓派上的轻量级信息收集工具:	https://github.com/x1mdev/ReconPi	https://www.x1m.nl	Hacker @ qbit.nl	Groningen	X1M IT Security	48	0	180	43	39	Python,Shell	0	0
ssl	ezXSS - 跨站漏洞辅助测试工具:	https://github.com/ssl/ezXSS	https://github.com/zaax		Netherlands	@zaax	2	0	95	43	7	HTML	0	0
mzet-	linux-exploit-suggester - Linux 本地提权审计工具:	https://github.com/mzet-/linux-exploit-suggester	https://z-labs.eu		Gdansk, Poland	Z-Labs, Software Security Labs	8	0	3	43	1	C,Shell,CSS,C++	1200	289
andrewilyas	关于对抗神经网络样本训练的一个 Repo: Circumventing the defense in Ensemble Adversarial Training: Attacks and Defenses:	https://github.com/andrewilyas/ens-adv-train-attack	http://andrewilyas.com	PhD student studying Machine Learning at MIT.	None	None	10	0	11	43	0	Python,JavaScript	0	0
Mr5m1th	各种开源CMS版本的漏洞以及EXP	https://github.com/Mr5m1th/0day	None		None	None	2	0	5	43	0	Java	473	145
JGillam	JGillam/burp-paramalyzer: Paramalyzer	https://github.com/JGillam/burp-paramalyzer	None		None	None	18	0	20	43	4	Shell	0	0
0xmachos	Every iOS security guide	https://github.com/0xmachos/iOS-Security-Guides	https://github.com/AbertayHackers	Security Engineer. Former @AbertayHackers Vice Gaffer. Purveyor of macOS security & rum. 🍎🐛	Scotland	None	23	0	61	43	20	Python,Shell,Ruby,HTML	0	0
pgarba	Nintendo Switch Binary loader for IDA Pro 7.0 :	https://github.com/pgarba/SwitchIDAProLoader	https://twitter.com/Blips_and_Chitz	Reverse engineering and security is my passion	None	None	9	0	11	42	2	C,C++	99	16
RealJTG	Meltdown - 从 Google Chrome 读取密码的 Meltdown PoC:	https://github.com/RealJTG/Meltdown	None	A bio.	None	None	15	0	287	42	7	Python,PHP	0	0
B3nac	Android-Reports-and-Resources - HackerOne 上披露的 Android 应用漏洞收集列表:	https://github.com/B3nac/Android-Reports-and-Resources	https://b3nac.com	Working on becoming a infosec professional. Independent Security Researcher via bug bounties. Contributing to the owasp-mstg. twitter.com/b3nac	California	None	19	0	11	42	10	Python,HTML,Java	0	0
yehgdotnet	S3Scanner - 扫描开放的 AWS S3 Buckets 并转储所有数据的工具:	https://github.com/yehgdotnet/S3Scanner	https://cybersecurityassessor.ninja	A Cyber Security Ninja	Yangon, Myanmar	None	330	0	259	41	71	Python,Java,Ruby	0	0
phage-nz	ph0neutria - 恶意软件样本采集工具:	https://github.com/phage-nz/ph0neutria	https://phage.nz	Security Architect / Amateur Malware Hunter	New Zealand	None	11	0	65	41	0	Python,C#,PowerShell	0	0
mkellerman	一款用于替代 PsExec 远程执行命令的 PowerShell 模块 Invoke-CommandAs 介绍: https://mkellerman.github.io/Death_to_psexec/ GitHub:	https://github.com/mkellerman/Invoke-CommandAs	https://mkellerman.github.io/	DevOps, CI/CD Automation, Windows Automation, PowerShell MacGyver.	Victoria, BC	None	13	0	8	41	8	PowerShell	0	0
dsopas	assessment-mindset - 网络安全评估思维导图:	https://github.com/dsopas/assessment-mindset	https://www.davidsopas.com	/me hacks! the webz	Portugal	Char49	10	0	34	41	1	Go,Python	299	36
davrodpin	mole - 建立基于 SSH 进行端口转发的命令行工具:	https://github.com/davrodpin/mole	http://davrodpin.github.io		None	Hewlett Packard Enterprise	15	0	5	41	5	Go,Ruby	0	0
P3GLEG	如何将 Docker 镜像反转为 Dockerfile: https://samaritan.ai/blog/reversing-docker-images-into-dockerfiles/ GitHub:	https://github.com/P3GLEG/WhaleTail	https://samaritan.ai		None	None	21	0	114	41	6	Go,Shell,JavaScript,Java,HTML	494	36
0x3curity	TheDoc - SQLMAP 自动化利用脚本:	https://github.com/0x3curity/TheDoc	https://github.com/0x3curity	BASH & Python programmer. Web Security Researcher for #AnonyInfo. -- Twits: @0x3curity @AnonyInfo	None	None	28	0	1	41	4	Shell,Ruby	90	30
jovanbulck	Nemesis - 研究基本 CPU 中断逻辑中的微体系结构时序泄漏(Paper): https://people.cs.kuleuven.be/~jo.vanbulck/ccs18.pdfGitHub:	https://github.com/jovanbulck/nemesis	https://distrinet.cs.kuleuven.be/people/jo	PhD student @KU_Leuven , Trusted Computing & Side-Channel Attacks , #IntelSGX #Sancus #Foreshadow	None	None	16	0	64	40	0	C,Verilog	0	0
dsnezhkov	Typhoon 管理执行工具包介绍: https://www.slideshare.net/dimas050/typhoon-managed-execution-toolkit GitHub:	https://github.com/dsnezhkov/typhoon	None		None	None	35	0	196	40	12	C#,Python,C,Go,C++	85	17
Fplyth0ner-Combie	Bug-Project-Framework: 漏洞利用框架模块分享仓库	https://github.com/Fplyth0ner-Combie/Bug-Project-Framework	None	攻防无绝对，技术无黑白	None	None	3	0	8	40	6	Python,PHP	151	47
yannayl	GoogleCTF18 Finals - BOBNEEDSHELP	https://github.com/yannayl/ctf-writeups/blob/master/2018/google_finals/bobneedshelp/README.md	None		None	None	36	0	13	39	6	Python,Shell,C,JavaScript,CSS	122	14
wagiro	BurpBounty - 用于改善主动及被动式扫描的 BurpSuite 扩展插件:	https://github.com/wagiro/BurpBounty	http://www.wagiro.com		None	None	4	0	6	39	5	Python,Java	357	74
steven-michaud	HookCase - macOS/OS X 上的逆向分析工具:	https://github.com/steven-michaud/HookCase	None		None	None	3	0	12	39	0	Objective-C++,C++	275	46
lucasg	idamagnum - 用于在 IDA 中集成 MagnumDB 请求的插件:	https://github.com/lucasg/idamagnum	None		None	None	22	0	33	39	3	C#,Python,C,TeX,CSS	0	0
jcesarstef	dotdotslash - 目录穿越漏洞辅助测试工具:	https://github.com/jcesarstef/dotdotslash	https://www.inseguro.com.br		São Paulo, Brazil	None	19	0	364	39	31	Python	0	0
immunIT	drupwn - Drupal 信息收集与漏洞利用工具:	https://github.com/immunIT/drupwn	https://www.immunit.ch		Nyon, Switzerland	immunIT	3	0	0	39	0	Python,Dockerfile	259	62
fboldewin	Operation Fast Cash - Hidden Cobra 使用的 AIX PowerPC 恶意软件解析:	https://github.com/fboldewin/FastCashMalwareDissected/blob/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra%E2%80%98s%20AIX%20PowerPC%20malware%20dissected.pdf	None		None	None	3	0	0	39	0	YARA	67	17
t4d	StalkPhish - 追查钓鱼攻击的工具:	https://github.com/t4d/StalkPhish	http://www.tad0.org	- Hackito Ergo Sum - /tmp/lab - loop - BlackBoxe - Jack - FTBX - B70 - 421 -	None	None	4	0	43	38	39	Python,Perl	129	39
rh0dev	From Assembly to JavaScript:从汇编到 JavaScript 与基于 ASM.JS JIT-Spray 的漏洞利用:	https://github.com/rh0dev/slides/blob/master/OffensiveCon2018_From_Assembly_to_JavaScript_and_back.pdf	https://rh0dev.github.io		None	None	4	0	0	38	0	HTML	37	21
r4wd3r	Windows RID 劫持攻击介绍 :	https://github.com/r4wd3r/RID-Hijacking/blob/master/slides/derbycon-8.0/RID_HIJACKING_DERBYCON_2018.pdf	https://r4wsecurity.blogspot.com/	Sometimes a tenor, sometimes a hacker.	None	None	11	0	10	38	9	Python,Ruby,PowerShell	102	29
jesuiscamille	AutoSQLi - 自动化 SQL 注入工具:	https://github.com/jesuiscamille/AutoSQLi	None		None	None	37	0	272	38	39	Python,Go	0	0
itm4n	Ikeext-Privesc - Windows IKEEXT DLL Hijacking Exploit Tool:	https://github.com/itm4n/Ikeext-Privesc	https://itm4n.github.io/	Pentester	Paris	None	6	0	15	38	5	Python,Visual,Shell,JavaScript,PowerShell	182	51
fei-ke	WeiboImageReverse: Chrome 插件，反查微博图片po主	https://github.com/fei-ke/WeiboImageReverse	None		None	None	48	0	435	38	9	JavaScript,Java	0	0
f3d0x0	GPON 家庭路由器远程代码执行漏洞利用脚本:	https://github.com/f3d0x0/GPON	https://twitter.com/f3d__	Security researcher · hacking · pentesting · beat-making · sometimes teaching · crypto	Italy	None	4	0	0	38	0	Python,C,HTML	183	61
evilmog	ntlmv1-multi - 将 NTLMv1/NTLMv1-ESS/MSCHAPv2 Hash 转换成方便 Hashcat 破解的 DES 模式的工具:	https://github.com/evilmog/ntlmv1-multi/	None		None	None	20	0	3	38	0	Python,Shell,PowerShell	199	42
danielplohmann	smda - 一个极简的递归反汇编库,它为从内存转储中精确恢复控制流图(CFG) 进行了优化:	https://github.com/danielplohmann/smda	https://github.com/fkie	Malware Researcher. Working for Fraunhofer @fkie.	None	None	7	0	79	38	0	Python	0	0
tylabs	dovehawk - 自动化加载 MISP 威胁指标的 Bro 框架模块:	https://github.com/tylabs/dovehawk	https://tylabs.com	Tools to detect malware in common document formats.	Canada	tylabs	17	0	30	37	0	Bro,Python,C,HTML,PHP	113	30
r3vn	badKarma - 高级网络信息收集工具包:	https://github.com/r3vn/badKarma	https://xfiltrated.com	Old school jedi Master and Ethical Hacker. I break security.	Italy	None	2	0	35	37	17	Python	259	67
AbedAlqaderSwedan1	ASWCrypter - 逃避杀软的 Payload 生成工具:	https://github.com/AbedAlqaderSwedan1/ASWCrypter	None		palestine	None	4	0	0	37	1	Shell,PHP	257	75
socprime	MuddyWater-APT - MuddyWater APT 检测指标:	https://github.com/socprime/MuddyWater-APT	https://socprime.com/en/	SOC Prime engineers security software and services to defend organizations from future cyber attacks with maximum efficiency and effectiveness	None	None	6	0	0	36	0	Python,JavaScript	58	10
saucxs	watermark: 网站的水印组件 降低数据泄密风险	https://github.com/saucxs/watermark	https://github.com/saubyte	爱好折腾的工程师，喜欢前端开发，致力于以后全栈工程师的方向。	江苏南京	@saubyte	48	0	37	36	16	JavaScript,HTML,Vue,Dart	229	63
romanking98	无需内存泄露,基于堆风水技术实现 libc-2.24 的 RCE:	https://github.com/romanking98/House-Of-Roman	None		None	None	8	0	2	36	1	Python,C,HTML	0	0
nirizr	idasix - IDAPython 兼容性库:	https://github.com/nirizr/idasix	None	Topics of interest include: security, reverse engineering, vulnerability analysis, fuzzing, data science, machine learning. @_nirizr on Twitter.	Mountain View, CA, USA	None	24	0	113	36	3	Python	0	0
alexandreborges	Malwoverview.py - 一款可以将恶意样本进行快速分类的简单工具:	https://github.com/alexandreborges/malwoverview	http://www.blackstormsecurity.com	Malware Researcher, Instructor, Consultant and Speaker.	None	Blackstorm Security	3	0	2	36	2	Python,C++	181	35
86hh	DreamLoader - ASM 实现的 PE Loader:	https://github.com/86hh/DreamLoader	None		None	None	6	0	0	36	1	HTML,Assembly	74	21
beahunt3r	Windows-Hunting - Windows 威胁狩猎中常用的检查点分析:	https://github.com/beahunt3r/Windows-Hunting	None	DFIR , Malware , OFFSEC , CSOC , SIEM	None	None	3	0	0	35	1	Python	245	64
yaofeifly	Vub_ENV: 跟踪真实漏洞相关靶场环境搭建	https://github.com/yaofeifly/Vub_ENV	https://yaofeifly.github.io/	<script>alert(xiaohuihui);</script>	None	None	24	0	74	34	10	Python,PHP,CSS	165	45
vessial	大疆无人机解密固件:	https://github.com/vessial/fw_decrypt	None		None	None	11	0	3	34	5	C,C++	25	11
rmikehodges	hideNsneak - 渗透测试基础设施快速部署工具:	https://github.com/rmikehodges/hideNsneak	None		None	None	19	0	23	34	3	Go,Python	213	34
phillips321	adaudit - 活动目录安全审计脚本:	https://github.com/phillips321/adaudit	http://www.phillips321.co.uk		UK	None	15	0	7	34	5	Python,Shell,Ruby,PowerShell,Perl	78	22
lclevy	firepwd.py, an open source tool to decrypt Mozilla protected passwords	https://github.com/lclevy/firepwd	https://twitter.com/lorenzo2472	interested in file formats, crypto and reverse engineering	France	None	12	0	14	34	8	Python,C,HTML	160	49
dgiagio	warp - 可用于创建自包含的二进制应用程序的工具:	https://github.com/dgiagio/warp	None		Toronto, Canada	Amazon	2	0	57	34	1	C,Rust	1300	44
brightiup	macOS AppleHV UAF 漏洞分析报告(CVE-2018-4242),来自 360 涅槃团队的 Zhuo Liang : https://brightiup.me/2018/06/11/AppleHV-Use-After-Free-CVE-2018-4242-Writeup/CVE-2018-4242.pdf ; PoC:	https://github.com/brightiup/research/blob/master/macOS/CVE-2018-4242/AppleHVUaF.c	https://brightiup.me	https://brightiup.me	None	None	9	0	421	34	34	Python,C,JavaScript	9	3
Arrexel	phpbash - 模拟 PHP 半交互式终端的 webshell:	https://github.com/Arrexel/phpbash	https://devnauts.com/		Canada	Devnauts	7	0	0	34	0	Python,Ruby,PHP,Java,Go	389	79
skorov	Ridrelay - 快捷简单获取域用户名的工具:	https://github.com/skorov/ridrelay	None		None	None	16	0	121	33	28	Python,Shell,JavaScript	311	50
shramos	polymorph - 实时网络数据包操作框架:	https://github.com/shramos/polymorph	None		None	None	7	0	5	33	1	Python	303	44
peikexin9	DeepXplore - 深度学习系统的自动化白盒测试:	https://github.com/peikexin9/deepxplore	https://sites.google.com/site/kexinpeisite/	PhD student at Columbia CS	New York	Columbia University	7	0	7	33	1	Python,HTML,Jupyter,Pure,LLVM	244	87
utds3lab	Multiverse - 非启发式的静态二进制重写器:	https://github.com/utds3lab/multiverse	None		None	None	15	0	0	32	2	Python,C,Java	219	20
ksluckow	awesome-symbolic-execution - 优秀符号执行资源收集:	https://github.com/ksluckow/awesome-symbolic-execution	None		Mountain View	None	20	0	78	32	9	TeX,Python,Java	393	62
heeeeen	Android VoIP 的安全性研究,来自 POC 2018 大会:	https://github.com/heeeeen/MySlide/blob/master/POC2018-heen-jiashui-fortranslation.pdf	None	https://www.twitter.com/heeeeen4x	None	None	43	0	322	32	41	Python,C,Java	9	3
cytvictor	TrunPortForward: Web管理的、多节点、多端口、高度自定义定向转发工具	https://github.com/cytvictor/TrunPortForward	https://i.urox.cn	A graduate from senior high.	Hunan Changsha, China	LightNetwork Computing Ltd	11	0	79	32	25	Python,Java,PHP,JavaScript	105	18
DownWithUp	在 GEARAspiWDM.sys 中导致 DOS 漏洞(CVE-2018-16712)的POC:	https://github.com/DownWithUp/CVE-2018-16712/	http://downwithup.github.io	Interested in security related software, malicious methods, how to stop them, Windows internals, and code exploitation. FASM, C, Pascal, and Python. Student.	Internet	None	23	0	39	32	20	C,Assembly	0	0
teoseller	osquery-attck: Mapping the MITRE ATT&CK Matrix with Osquery	https://github.com/teoseller/osquery-attck	None		None	None	3	0	481	31	130		189	29
jakobbotsch	Fuzzlyn 项目可以生成随机的 C# 程序,通过优化和未优化代码之间的差异,找到了多个.NET JIT错误: https://twitter.com/i/web/status/1027224393217449986相关项目和漏洞的补丁链接: 1) https://github.com/jakobbotsch/Fuzzlyn 2) https://github.com/dotnet/roslyn 3)	https://github.com/jakobbotsch/Fuzzlyn	None		Aarhus, Denmark	None	28	0	19	31	5	C#,LLVM,C++	0	0
cybermaggedon	cyberprobe: Capturing, analysing and responding to cyber attacks	https://github.com/cybermaggedon/cyberprobe	None		None	None	53	0	9	31	1	Python,Jsonnet,C,Shell,Makefile	0	0
MXi4oyu	DockerXScan—Docker镜像漏洞扫描器	https://github.com/MXi4oyu/DockerXScan	http://www.secapi.net		None	None	115	0	179	31	0	Go,Jupyter	86	52
Kinimiwar	Penetration-Testing - 渗透测试方向优秀资源收集:	https://github.com/Kinimiwar/Penetration-Testing	None		None	None	2900	0	16	31	102	C,Shell,HTML,Python,Kotlin,JavaScript,C++,Perl,C#,F#,Rich,Go,Ruby	225	112
JonCooperWorks	judas - 钓鱼工具,可克隆网站和配置上级代理:	https://github.com/JonCooperWorks/judas	None		None	None	35	0	8	31	5	Go,Kotlin,JavaScript,Python,CSS	204	50
quoscient	octopus - 区块链智能合约安全分析工具:	https://github.com/quoscient/octopus	https://quoscient.io/		None	None	10	0	1	30	0	Python	168	27
m101	hsploit - m101 的 HEVD 漏洞利用程序:	https://github.com/m101/hsploit	None		None	None	11	0	7	30	0	Python,C,Rust	17	9
highmeh	retrieve-osxhash.py - 脚本可以提取OSX Hash并且通过hashcat破解 :	https://github.com/highmeh/pentest_scripts/blob/master/retrieve-osxhash.py	None		Southern California	None	8	0	3	30	2	Python,Shell,HTML	115	19
glen-mac	goGetBucket - 枚举并分析 Amazon S3 Buckets 安全性的渗透测试工具:	https://github.com/glen-mac/goGetBucket	http://glennmcgui.re		Australia	Independant	32	0	181	30	77	Python,C,Java,OpenEdge	0	0
cclabsInc	RFCrack - 一个 SDR 攻击工具:	https://github.com/cclabsInc/RFCrack	http://cclabs.io	Twitter: https://twitter.com/ficti0n http://consolecowboys.com http://console-cowboys.blogspot.com/	None	cclabs	2	0	0	30	0	Python	352	73
bbbrumley	超线程架构的侧信道漏洞 PortSmash(CVE-2018-5407)的 EXP :	https://github.com/bbbrumley/portsmash	None		None	None	8	0	3	30	4	TeX,CoffeeScript,C,JavaScript	437	61
SkypLabs	probequest - 用于嗅探并显示通过无线接口传输的Wi-Fi探测请求的工具:	https://github.com/SkypLabs/probequest	https://github.com/Workday	Self-educated since my childhood, I am a technology and science lover with a deep passion for IT, InfoSec and open-source software, and obsessed by automation.	Dublin, Ireland	@Workday	35	2	135	30	7	Python,C,Shell	0	0
tokyoneon	Armor - 用于创建在 macOS 上反弹 Shell 的加密 Payload 的 bash 脚本:	https://github.com/tokyoneon/Armor	https://creator.wonderhowto.com/tokyoneon	tokyoneon=$(printf Technical writer at WonderHowTo && $infosec_researcher;./hacker.sh &)	@tokyoneon_	None	5	0	0	29	0	Shell	0	0
sud0woodo	DCOMrade - 用于枚举 DCOM 应用程序的 Powershell 脚本 :	https://github.com/sud0woodo/DCOMrade	None	Binary enthusiast	None	None	8	0	1	29	2	Python,Go,PowerShell	181	39
gdedrouas	Exchange-AD-Privesc - 利用 Microsoft Exchange 的 DACL 问题提升域内权限:	https://github.com/gdedrouas/Exchange-AD-Privesc	http://www.elysee.fr/		None	Présidence de la République	6	0	18	29	2	C,JavaScript,PowerShell	268	52
B16f00t	whapa - whatsapp database parser:	https://github.com/B16f00t/whapa	None	Forensic and Cybercrime investigator	None	None	1	0	56	29	2	Python	135	37
sie504	Struts-S2-xxx: 整理收集Struts2漏洞环境	https://github.com/sie504/Struts-S2-xxx	http://www.sec-note.com	Web Security	None	None	29	0	274	28	45	Python,PHP,Java,HTML	0	0
iansus	hideproc-lkm - 用于隐藏进程的 Linux 4.9 内核模块:	https://github.com/iansus/hideproc-lkm	https://github.com/wavestone-cdt	Pentest @wavestone-cdt Incident Reponse @CERT-W	Paris	None	19	0	5	28	3	Python,C,PHP	58	16
dongfangyuxiao	github_dis: 一款精简版github信息泄露搜集工具	https://github.com/dongfangyuxiao/github_dis/	None	吾爱饭	上海	None	49	0	15	28	10	Python,Shell,JavaScript	0	0
cboin	re_lab - 逆向工程环境的 Docker 镜像:	https://github.com/cboin/re_lab	None		Paris	Université Lille 1	17	0	79	28	9	C,Shell,Java,Python,Go,Dockerfile	177	20
bin2415	用于检测类型混淆类漏洞的技术:	https://github.com/bin2415/Bitype/blob/master/paper/Bitype.pdf	http://blog.binpang.me		None	NJU	37	0	213	28	10	Python,Assembly,Java,C++	72	26
b4rtik	metasploit-execute-assembly - 通过 Meterpreter 会话执行 .NET 程序集的后渗透攻击模块:	https://github.com/b4rtik/metasploit-execute-assembly	None		None	None	8	0	5	28	0	C#,Batchfile,Ruby,PowerShell,C++	88	18
MSG-maniac	mail_fishing: 甲方安全系统-内部钓鱼系统	https://github.com/MSG-maniac/mail_fishing	None		None	None	21	0	69	28	5	Python,C,Vue	1	3
Ga-ryo	IDAFuzzy - 协助寻找命令/函数/结构等信息的 IDA Pro 插件:	https://github.com/Ga-ryo/IDAFuzzy	None	TokyoWesterns pwn 酒	None	None	17	0	136	28	0	Python,C#,Shell	142	21
Abdulraheem30042	Cl0neMast3r - 协助 penetration tester 和 bug hunter 更轻松的管理来自 Github 的工具:	https://github.com/Abdulraheem30042/Cl0neMast3r	https://twitter.com/abdulrah33mk	Python programmer && Bug hunter	Egypt	None	1	0	0	28	0	Python	163	56
zxgio	用于 GDB 和 GEF 工具的命令备忘清单:	https://github.com/zxgio/gdb_gef-cheatsheet	None	Security enthusiast, CTF player, co-founder of ZenHack team	None	None	79	0	215	27	6	TeX,Python,Shell	0	0
two06	Inception - 为逃避 AV 查杀进行C#内存编译和反射加载的项目:	https://github.com/two06/Inception	None		None	None	7	0	2	27	0	Python,C#,PowerShell	273	71
therealsaumil	static-arm-bins - 静态编译好的用于调试分析的 ARM 常用逆向工具:	https://github.com/therealsaumil/static-arm-bins/	None		None	None	7	0	0	27	0	C,JavaScript,Assembly,Arduino	0	0
snooze6	FiOS - 基于 objection 框架可视化地审计 iOS APP:	https://github.com/snooze6/FiOS	https://es.linkedin.com/in/armando-nogueira-rio-25ba67116	The universe as we observe is a really vast place, fact that most people tend to ignore in order to have a quiet life... Not me! I like challenges!	None	None	31	0	43	27	19	Java,C,JavaScript,Swift,CSS	146	15
shellster	DCSYNCMonitor -部署在域控上用于监视 DCSYNC 和 DCSHADOW 攻击的工具:	https://github.com/shellster/DCSYNCMonitor	None		None	None	30	0	172	27	8	Python,C,C++	126	23
sfakiana	References for CTI-EU 2018	https://github.com/sfakiana/CTI-EU-2018	https://threatintel.eu	CTI and DFIR Professional	None	None	4	0	620	27	80		14	4
nsonaniya2010	SubDomainizer - 用于查找隐藏在页面的内联和引用 Javascript 文件中的子域的工具:	https://github.com/nsonaniya2010/SubDomainizer	None	Bug Bounty hunter, Programmer	Bangalore, India	None	12	0	29	27	0	Python,C,HTML	361	49
felixweyne	imaginaryC2 - 帮助分析恶意软件网络行为的模拟 C2 托管 HTTP 服务器:	https://github.com/felixweyne/imaginaryC2	https://www.uperesia.com		United Kingdom	None	2	0	17	27	0	Python,PowerShell	220	38
cervoise	Abuse-bash-for-windows - Windows 上的 Bash 滥用工具:	https://github.com/cervoise/Abuse-bash-for-windows	None		Paris	None	19	0	0	27	2	Python,Batchfile,C++	33	16
TakahiroHaruyama	stackstring_static.py - 静态恢复在栈中构造的字符串的 IDAPython 脚本 :	https://github.com/TakahiroHaruyama/ida_haru/tree/master/stackstring_static	https://twitter.com/cci_forensics		日本	None	6	0	18	27	0	Python	50	14
MohamedNourTN	Terminator - metasploit payload 生成器:	https://github.com/MohamedNourTN/Terminator	http://fsociety.tn	Because open-source is the future	Tunisia	None	3	0	3	27	3	Python	129	50
xluohome	phonedata: 手机号码归属地信息库	https://github.com/xluohome/phonedata	None	奶爸	China	None	42	0	189	26	0	Go	0	0
qianniaoge	SecurityManageFramwork：企业内网安全管理平台	https://github.com/qianniaoge/-SecurityManageFramwork	None		None	None	249	0	158	26	220	C,ASP,Java,HTML,Python,JavaScript,Shell,PHP,PowerShell	23	30
mez0cc	Windows SMB Server 漏洞(MS17-010)支持回连 Shell 的利用 :	https://github.com/mez0cc/MS17-010_WORAWIT	https://github.com/mez0cc	@mez0cc	None	None	5	0	162	26	12	Python	0	0
hwroot	攻击 PS4 - 从 WebKit 到 FreeBSD 内核的漏洞利用:	https://github.com/hwroot/Presentations/blob/master/Mess%20with%20the%20best%20die%20like%20the%20rest%20mode%20by%20Volodymyr%20Pikhur%20-%20REcon%20Brussels%202018.pdf	None		None	None	4	0	1	26	0	Assembly,C++	26	7
dotboris	vuejs serverside template xss:	https://github.com/dotboris/vuejs-serverside-template-xss	https://github.com/pmctire	Crazy person	Sherbrooke, QC, Canada	@pmctire	37	0	78	26	23	PHP,Ruby,CSS,Rust,Elixir	0	0
bfuzzy	auditd-attack - 映射到 MITRE ATT&CK 框架中的 Linux 安全审计规则:	https://github.com/bfuzzy/auditd-attack	None		None	None	27	0	16	26	2		0	0
aedoo	Allscanner: 数据库和服务弱口令检测以及未授权访问检测	https://github.com/aedoo/Allscanner	None	you are my sunshine	None	None	11	0	26	26	11	Python	80	34
78778443	permeate: 渗透测试演练的 Web系统	https://github.com/78778443/permeate	None		None	None	39	0	121	26	1	Python,JavaScript,Java,PHP	150	31
LloydLabs	Windows-API-Hashing - 将导出函数进行 Hash 加密混淆的示例:	https://github.com/LloydLabs/Windows-API-Hashing	https://github.com/LloydLabs	Somewhere in the heap, @LloydLabs on Twitter	The Burgh	None	3	0	115	25	8	Go,C	102	13
HD421	Monitoring-Systems-Cheat-Sheet: 各种监控系统的漏洞速查手册:	https://github.com/HD421/Monitoring-Systems-Cheat-Sheet	None		None	Digital Security	9	0	286	25	26		0	0
0xRadi	OWASP-Web-Checklist - OWASP Web 安全检测清单:	https://github.com/0xRadi/OWASP-Web-Checklist	http://0xRadi.me	As I learn, I do. As I do, I learn!	None	None	6	0	59	25	2	Python,HTML	250	54
twogood	unshield - 用于从 InstallShield 安装程序中提取 CAB 文件的工具和库:	https://github.com/twogood/unshield	https://activout.se/	Coding Architect - committing to your success!	Ronneby, Sweden	Activout AB	32	0	79	24	2	C#,C	0	0
tiaotiaolong	TTLScan: 一款插件化的漏洞扫描器框架	https://github.com/tiaotiaolong/TTLScan	http://www.tiaotiaolong.net	stuhackdent	Beijing	猎豹	19	0	240	24	114	Python,HTML,JavaScript,Vue	59	12
russelltomkins	活动目录账户权限安全审计脚本分享:	https://github.com/russelltomkins/Active-Directory/blob/master/Query-UserAccountControl.ps1	None		Australia	Microsoft	8	0	2	24	1	PowerShell	80	20
cleverbao	WebRange: 一个Web版的docker管理程序	https://github.com/cleverbao/WebRange	http://cleverbao.github.io		None	None	6	0	427	24	98	Python,HTML,JavaScript,PHP,CSS	79	16
bayotop	sink-logger - BurpSuite 扩展,用于记录所有传入 Javascript 接收器的数据:	https://github.com/bayotop/sink-logger	https://twitter.com/_bayotop		None	None	22	0	18	24	1	Python,Go,Shell	148	15
thom-s	docx-embeddedhtml-injection - Microsoft Word 2016 通过内嵌视频下载执行恶意软件的利用脚本:	https://github.com/thom-s/docx-embeddedhtml-injection	None	Utilities, automation and cybersecurity in PowerShell and Python 🐍	None	None	4	0	117	23	26	JavaScript,PowerShell	91	13
stuhli	DFIRTrack - 用于跟踪事件响应和数字取证的工具:	https://github.com/stuhli/dfirtrack	None	Digital Forensics and Incident Response	Berlin	None	2	0	67	23	13	HTML	127	31
kov4l3nko	ARM64JSON - JSON 格式的 ARM64 指令编码:	https://github.com/kov4l3nko/ARM64JSON	https://kov4l3nko.github.io/about/	iOS/Android reverse engineer and security researcher	Ukraine	None	5	0	0	23	0	Python,HTML,Java,JavaScript	34	3
im-bug	BlockChain-Security-List Repo	https://github.com/im-bug/BlockChain-Security-List	None	BlockChain Security	None	None	6	0	6	23	2	Python,Solidity	57	17
fbkcs	msf-elf-in-memory-execution - 内存执行 ELF 的 Metasploit 后渗透测试模块:	https://github.com/fbkcs/msf-elf-in-memory-execution	https://fbkcs.ru/	InfoSec company	Moscow	None	3	0	0	23	0	Python,Shell,Ruby	318	37
chenerlich	FCL - 常见无文件执行恶意命令收集项目:	https://github.com/chenerlich/FCL	None		None	None	18	0	12	23	0	Python,C,Shell,C++	345	58
TonyPhipps	THRecon - 威胁狩猎侦察工具包:	https://github.com/TonyPhipps/THRecon	None	[email protected]	None	None	6	0	158	23	4	Lua,C,PowerShell	174	40
MalwareCantFly	Vba2Graph - 生成 VBA 调用图以协助分析恶意文档的工具:	https://github.com/MalwareCantFly/Vba2Graph	None		None	None	1	0	2	23	0	Python	212	28
C-REMO	Obscure-IP-Obfuscator: obscure any IP address	https://github.com/C-REMO/Obscure-IP-Obfuscator	https://www.ramicomer.com/	professor , pentester , coder	Bosnia & Herzegovina	Ramić Omer	8	0	7	23	3	Python,JavaScript	98	25
ticarpi	jwt_tool - JSON Web Token 安全测试工具包:	https://github.com/ticarpi/jwt_tool	https://www.ticarpi.com	Pentester, Infosec Analyst, Security Researcher, GIAC Advisory Board Member	UK	None	6	0	112	22	8	Python,Shell,CSS	259	50
si9int	Acamar - 一款子域名收集工具:	https://github.com/si9int/Acamar	https://si9int.sh	Whitehat in own definition	None	None	7	0	11	22	0	Python	0	0
reoky	android crackme challenge 学习收集:	https://github.com/reoky/android-crackme-challenge	http://www.rit.edu/	I want to make the world better with software.	(43.08731943912015, -77.67346858978271)	Rochester Institute of Technology	15	0	11	22	10	Python,Java,C++,Perl	255	48
Gh05ter	Bank: 工控安全资料共享库	https://github.com/Gh05ter/Bank	None	<%eval request(lubr)%>	China	None	36	0	104	22	25	Python,Lua,Java	54	26
0xcl	Clang 控制流程完整性(CFI)绕过技术:	https://github.com/0xcl/clang-cfi-bypass-techniques	https://www.trust.informatik.tu-darmstadt.de/people/christopher-liebchen/		None	None	2	0	0	22	0	HTML,JavaScript	85	20
viperbluff	PortWitness - 自动收集子域名并扫描其端口检测子域名状态的工具:	https://github.com/viperbluff/PortWitness	https://github.com/payatu	I prefer to stay hungry so that i can stay foolish!!	/dev/null	@payatu	11	0	8	21	0	Python,Shell,Arduino	68	16
smeso	利用三星 USB MTP(媒体传输协议)任意读写三星手机存储设备 Exploit,同时可以 Bypass 锁屏和只充电模式(SVE-2017-10086):	https://github.com/smeso/MTPwn	https://smeso.it		None	None	10	0	8	21	0	Python,C	0	0
felicitychou	MalAnalyzer: 基于docker虚拟化的恶意代码沙箱	https://github.com/felicitychou/MalAnalyzer	None	Secruity	China, Shenzhen	None	39	0	479	21	72	Python,Perl	0	0
dekuan	VwFirewall: 微盾VirtualWall防火墙整套源代码	https://github.com/dekuan/VwFirewall	http://www.dekuan.org/		Beijing, China	DeKuan, Inc.	53	0	17	21	0	TypeScript,C,PHP,JavaScript	139	57
DavidJacobson	SafeText - 用于删除同形字符和零宽字符的脚本,以便安全地分发匿名来源文档:	https://github.com/DavidJacobson/SafeText	https://www.davidej.com	Undergraduate at Binghamton University, studying Computer Science. Primarily focused on Cyber Security & Forensics - but really anything that grabs my attention	NYC && Binghamton	None	28	0	94	21	20	Python,Shell	0	0
violentlydave	mkhtaccess_red - 自动将来自沙盒的请求重定向到正常页面的 htacess 规则生成工具:	https://github.com/violentlydave/mkhtaccess_red	https://twitter.com/violentlydave		Tampa, Florida, United States of America	None	7	0	12	20	5	Python,Shell	59	12
razmashat	multi_path-with-remount - iOS 11.3.X multi_path 漏洞利用:	https://github.com/razmashat/multi_path-with-remount	None		None	None	15	0	2	20	1	C#,C,Objective-C	47	11
jymcheong	AutoTTP - Python 实现的 Empire / Metasploit 等框架的 API 调用库,用于实现自动化攻击:	https://github.com/jymcheong/AutoTTP	https://jym.sg		Singapore	None	243	0	26	20	21	Python,C#,Shell,PowerShell,C++	0	0
gregvish	L1TF(Foreshadow) VM guest虚拟机读取主机内存PoC(CVE-2018-3646):	https://github.com/gregvish/l1tf-poc/	None		None	None	8	0	7	20	2	Python,Shell,C,JavaScript	65	19
franccesco	Getaltname - 从 SSL 证书收集子域名的工具:	https://github.com/franccesco/getaltname	https://codingdose.info	Author of CodingDose a programming blog about snippets, testing and coding horror. A committed fan of learning and self improvement. Python and Ruby programmer.	Managua, Nicaragua	None	16	0	39	20	5	Python,HTML,CSS	0	0
finixbit	elf-parser - 轻量级 ELF 二进制头解析工具:	https://github.com/finixbit/elf-parser	https://github.com/andela	Python, DevOps, Security	0x41414141, Accra	@andela	10	0	260	20	0	Python,Clojure,C++	0	0
beaujeant	逆向 MMORPG 游戏 Pwn Adventure 3:	https://github.com/beaujeant/PwnAdventure3/blob/master/Workshop/re-mmorpg-troopers18.pdf	https://twitter.com/beaujeant	IT Security , Pentester , Researcher	None	None	6	0	1	20	0	Python,Lua,HTML,CSS	58	15
PaoloMonti42	salt - 用于追踪 Linux 内核 SLUB 分配器状态的工具:	https://github.com/PaoloMonti42/salt	None	Pursuing a double degree in Embedded Systems @ EURECOM and Polytechnic of Turin	None	None	7	0	12	20	10	Python,C,Makefile,Verilog,VHDL	70	10
unassassinable	Privileged Access Workstation (PAW) - 企业管理员安全管理设备、防御密码窃取、防御摆渡攻击的一套工具集:	https://github.com/unassassinable/PAW	None		None	None	6	0	0	19	0	C,PowerShell	170	29
liulilittle	PaperAirplane: 一个类似于Proxifier的SOCKS5代理工具	https://github.com/liulilittle/PaperAirplane	None	hope that one day in the meet.	None	None	10	0	1	19	0	C#,C++	69	39
k4mpr3t	b4tm4n - PHP Webshell :	https://github.com/k4mpr3t/b4tm4n	https://k4mpr3t.000webhostapp.com/	The Darkness Rises	None	None	7	0	1	19	0	PHP	0	0
ixty	mandibule - linux elf 进程注入工具:	https://github.com/ixty/mandibule	None		None	None	8	0	8	19	0	Shell,C,HTML	141	36
codeexpress	respounder - 用于检测网络中是否存在 Responder 的工具:	https://github.com/codeexpress/respounder	None	Programming, offensive security, blue team tools etc.	None	None	6	0	4	19	0	Go,HTML,Ruby	197	19
JeffXue	web-log-parser: web日志分析工具	https://github.com/JeffXue/web-log-parser	http://www.jeffxue.cn	Full Stack	ShenZhen	77ircloud	25	0	108	19	11	Python,Shell,AGS,Vim	160	48
InfamousSYN	rogue - 无线网络攻击工具包:	https://github.com/InfamousSYN/rogue	https://infamoussyn.wordpress.com/		None	InfamousSYN	16	0	94	19	1	Python,Shell,Ruby	0	0
Frky	scat - 动态分析二进制程序检索与函数相关信息的工具:	https://github.com/Frky/scat	None		None	None	55	0	18	19	2	Python,C	0	0
pgorczak	通过 Docker 和共享内存运行 end-to-end srsLTE 系统的最小实例:	https://github.com/pgorczak/srslte-docker-emulated	None		Dortmund, Germany	TU Dortmund University	33	0	137	18	24	Python,Clojure,Dockerfile	0	0
hrbust86	HookMsrBySVM - 通过 AMD SVM Hook msr 以监视 x64 中的系统调用:	https://github.com/hrbust86/HookMsrBySVM	None	a chinese anti virus worker. welcome those programers around all of the world make a friend to me .	None	None	17	0	10	18	3	C++	59	33
arnaugamez	Introducing radare2 for humans,radare2 使用介绍:	https://github.com/arnaugamez/r2con2018-Introducing_r2_for_humans/blob/master/introducing-radare2-humans.pdf	https://github.com/HackingLliure		None	@HackingLliure	14	0	21	18	3	Python,Java	16	1
wesleyraptor	streamingphish - 使用监督机器学习从证书透明度日志网络中检测钓鱼域名的工具:	https://github.com/wesleyraptor/streamingphish	None	All things enterprise security and machine learning.	San Jose, CA	PatternEx	4	0	22	17	1	JavaScript,Jupyter	198	34
tehw0lf	airbash - 全自动的 WPA PSK 握手包捕获脚本:	https://github.com/tehw0lf/airbash	https://github.com/conciso	IT Consultant @conciso (Background: M. Sc. Biology @RUB-Bioinf)	None	None	9	0	131	17	8	Python,C,JavaScript,Objective-C	0	0
raz-varren	xsshell - XSS 反向 shell 框架:	https://github.com/raz-varren/xsshell	None	Professional person	None	Sad Happy Media :):	10	0	14	17	0	Go,JavaScript,PHP	190	26
nashcontrol	Bounty Monitor	https://github.com/nashcontrol/bounty-monitor	None		None	None	4	0	382	17	4	Python,CSS	0	0
matthastings	DSCompromised:利用 Windows DSC 进行横向渗透的利用脚本:	https://github.com/matthastings/DSCompromised	None		None	None	4	0	0	17	0	Python,PowerShell	84	22
hi-WenR0	MLCheckWebshell:机器学习检测Webshell	https://github.com/hi-WenR0/MLCheckWebshell	http://www.wenr0.me		None	None	6	0	159	17	9	C,Python,JavaScript,HTML,PHP,CSS	75	26
binary1985	Microsoft ADFS 服务中可基于时间来枚举用户的漏洞披露: 1) https://github.com/binary1985/VulnerabilityDisclosure/blob/master/ADFS-Timing-Attack; 2)	https://github.com/binary1985/VulnerabilityDisclosure/blob/master/ADFS-Timing-Attack;	None		None	None	37	0	5	17	6	Python,Ruby,Roff	21	6
STEALTHbits	poshkatz - Mimikatz PowerShell 模块:	https://github.com/STEALTHbits/poshkatz	https://www.stealthbits.com/	STEALTHbits Technologies is a cybersecurity software company focused on protecting an organization’s sensitive data and credentials	Hawthorne, NJ	STEALTHbits Technologies	3	0	0	17	0	PowerShell	125	16
P1CKLES	SharpBox - 一个基于 C# 的工具,通过 Dropbox API 对 Dropbox 进行压缩和加密:	https://github.com/P1CKLES/SharpBox	http://pickles.xyz		Charles Town, WV.	Specter Ops	6	0	1	17	8	C#,Swift	59	18
zwq0320	使用CNN进行样本恶意动态行为检测	https://github.com/zwq0320/malicious_dynamic_behavior_detection_by_cnn	None		None	None	1	0	0	16	0	Python	88	48
peterjaric	archaeologit - 扫描指定 GitHub 仓库历史记录寻找敏感信息泄露的工具:	https://github.com/peterjaric/archaeologit	http://javahacker.com		None	None	26	0	19	16	4	Python,Shell,JavaScript	0	0
gunnerstahl	JQShell - jQuery 文件上传插件漏洞利用工具:	https://github.com/gunnerstahl/JQShell	None		None	None	11	0	7	16	5	Python	0	0
fridgehead	Powershell-SSHTools - PowerShell 下的 SSH 工具集合:	https://github.com/fridgehead/Powershell-SSHTools	http://imakethin.gs		None	None	31	0	20	16	1	Python,C#,Java,PowerShell	112	18
dwizzzle	零信任方法是否能提供真正的安全性?来自 BlackHat USA 2018:	https://github.com/dwizzzle/Presentations/blob/master/David%20Weston%20-%20Zer0ing%20Trust%20-%20Do%20Zero%20Trust%20Approaches%20Deliver%20Real%20Security.pdf	None	I take naps, but i stay woke	None	None	2	0	0	16	0	C	27	1
Busindre	dumpzilla - 从 Firefox / Iceweasel / Seamonkey 浏览器中提取数字取证资料的工具:	https://github.com/Busindre/dumpzilla	https://www.busindre.com	ლ(́◕◞Ѿ◟◕‵ლ)	Mêlée Island	FreeTSA	32	0	3	16	4	Python,Shell	66	20
1lastBr3ath	drmine - 自动化检测网页是否包含挖矿脚本的工具:	https://github.com/1lastBr3ath/drmine	http://㎠.㎺/		Kathmandu, Nepal	None	22	0	92	16	9	Python,C,JavaScript,CSS	30	45
kevlar1818	is_my_password_pwned - 判断密码是否出现在被黑账户数据库中的脚本:	https://github.com/kevlar1818/is_my_password_pwned	None		Maine, USA	None	23	0	192	15	14	Python,Shell,Elixir	0	0
juhakivekas	multidiff - 用于逆向工程和二进制数据分析的 diff 工具:	https://github.com/juhakivekas/multidiff	None	An [organic automaton] pretending to know about cryptography, software security, and new media.	Helsinki	None	15	0	86	15	24	Python,C,Assembly	0	0
cwellszhang	DetectMaliciousURL: Applying text model to Detection Task	https://github.com/cwellszhang/DetectMaliciousURL	None	SJTU	Shanghai	None	9	0	195	15	2	Python	0	0
Lopseg	Jsdir - 一个从 js 文件中提取隐藏 URL 并保存,为进一步分析提供支持的 Burp Suite 扩展:	https://github.com/Lopseg/Jspathextractor	https://lops3g.wordpress.com	Ethical Hacker, Security Consultant, Student of Computer engineering, Developer & Coffee lover.	Brazil	None	29	0	33	15	1	Python,Ruby	0	0
Hestat	minerchk - 检测 Linux 服务器上恶意挖矿程序的 Bash 脚本:	https://github.com/Hestat/minerchk	http://laskowski-tech.com	DFIR-orensicator, Sys-Admin and overall infosec learner	None	None	16	0	102	15	2	Python,YARA,Shell,PowerShell	0	0
1tayH	noisy - DNS,HTTP/S 噪声数据生成器:	https://github.com/1tayH/noisy	https://huri.biz		Israel	Sndbox	5	0	77	15	5	Python,Vue	0	0
sawzeeyy	Sanitiz3r - 子域名信息提取工具:	https://github.com/sawzeeyy/Sanitiz3r	None	🕷 Bounty Hunter , InfoSec Newbie	Nigeria	None	7	0	1	14	2	Python,JavaScript	70	12
omerporze	brokentooth - CVE-2018-4327 iOS 越狱漏洞 POC,支持11.4前的版本:	https://github.com/omerporze/brokentooth	None		None	None	2	0	261	14	5	Objective-C	0	0
k0retux	fuddly - 模糊测试和数据操作框架:	https://github.com/k0retux/fuddly	None		None	None	1	0	4	14	0	Python	145	41
stuhirst	AWS 安全检测相关的项目列表:	https://github.com/stuhirst/awssecurity/blob/master/arsenal.md	https://twitter.com/StuHirstInfoSec	A Security Bloke.	None	None	3	0	0	13	0	HTML,JavaScript	169	39
rootVIII	proxy_requests - 自动获取网络代理并配置 requests 库代理的脚本:	https://github.com/rootVIII/proxy_requests	None	hey SHIPMATE	None	None	19	0	31	13	14	Python	0	0
bmax121	BudHook - 基于 YAHFA 编写的类似 Xposed 的 Android hook 框架:	https://github.com/bmax121/BudHook	None		None	None	2	0	136	13	11	Java,C++	118	39
blackzert	Linux ASLR and GNU Libc:地址空间布局的计算与 Stack Canary 的 Bypass:	https://github.com/blackzert/aslur/raw/master/offensivecon-talk.pdf	None		None	None	2	0	1	13	0	Python,C++	47	9
blackwolfsec	BFscan: 基于python3实现规避防火墙的轻量级信息探测工具	https://github.com/blackwolfsec/BFscan	http://blackwolfsec.cc		None	None	6	0	183	13	3	Python,HTML,JavaScript	22	7
TheTwitchy	xxer - XXE 盲注辅助程序,使用 HTTP 和 FTP 来提取信息:	https://github.com/TheTwitchy/xxer	None		None	None	15	0	34	13	1	Python,C,Java	194	33
troybowman	iOS Instruments Server 通信协议分析:	https://github.com/troybowman/dtxmsg/blob/master/slides.pdf	None		None	None	8	0	2	12	1	C,Assembly,C++	43	4
mharjac	bad_ducky - Rubber Ducky 的克隆项目,用于在 CJMCU BadUsb 开发板上实现 BadUSB 攻击,支持 Rubber Ducky 脚本:	https://github.com/mharjac/bad_ducky	None		None	None	9	0	44	12	0	Python,Shell,C++	131	37
joarleymoraes	net_guard - 使用 ARP 协议探测网络中未知设备的工具:	https://github.com/joarleymoraes/net_guard	https://joarleymoraes.com/	Building stuff	Brazil	None	22	0	17	12	0	Python,Shell	0	0
dezhub	内核模式威胁与实际防御,来自 BlackHat USA 2018:	https://github.com/dezhub/Slides/blob/master/Desimone-Landau-Kernel-Mode-Threats-and-Practical-Defenses.pdf	None		None	None	11	0	0	12	0	Python,C#,HTML,C++	7	2
2young2simple	yispider: 一款分布式爬虫平台	https://github.com/2young2simple/yispider	None		None	None	32	0	134	12	9	Go,Python,C,JavaScript	101	21
0xR0	shellver - 一句话反弹 Shell 生成工具:	https://github.com/0xR0/shellver	None		None	None	11	0	1	12	0	Python,PHP,HTML,C++	166	45
scrapbird	sarlacc - 用于收集恶意垃圾邮件的 SMTP 服务器:	https://github.com/scrapbird/sarlacc	https://github.com/Roamltd	DevOps guy who enjoys malware analysis. @_scrapbird	New Zealand	@Roamltd	22	0	42	11	6	Python,Dockerfile,Perl	0	0
rootbsd	fridump3 - 基于 Frida 实现的内存转储工具:	https://github.com/rootbsd/fridump3	None		Europa	None	19	0	3	11	0	Python,Objective-C++	103	15
bcdannyboy	缓冲区溢出如何通过 JIT Spray ROP 来进行利用详细介绍:	https://github.com/bcdannyboy/Research/blob/master/JIT-SprayedROP.pdf	None	Red Teamer, DFIR, Researcher, looking to learn and looking to earn. Opinions are my own.	None	None	4	0	1	11	1	Python,C	28	5
alex91ar	Diamorphine - 适用于 Linux Kernels 2.6.x/3.x/4.x 内核的 LKM rootkit:	https://github.com/alex91ar/Diamorphine	None	Pentester. Currently working at Immunity Inc.	Ciudad Autonoma de Buenos Aires, Argentina	Immunity Inc.	4	0	1	11	0	Python,C,C++	30	9
aatlasis	Chiron - 具有高级 IPv6 扩展头操作功能的 IPv6 安全评估框架:	https://github.com/aatlasis/Chiron	http://www.secfu.net	A security researcher and practitioner with a special interest in network protocols insecurities.	Europe	None	3	0	1	11	0	Python	129	13
tthtlc	Awesome Source Code Analysis Via Machine Learning Techniques	https://github.com/tthtlc/awesome-source-analysis	None		None	None	95	0	166	10	43	Python,C,Shell,Assembly,C++	26	3
phdphuc	mac-a-mal - 基于 Cuckoo 沙盒的 macOS 恶意软件分析工具的内核监控模块:	https://github.com/phdphuc/mac-a-mal/	https://twitter.com/phd_phuc		None	None	2	0	5	10	0	Python,C	49	13
kirillwow	ids_bypass - 绕过 Suricata IDS 规则注入恶意数据的 POC (CVE-2018-6794):	https://github.com/kirillwow/ids_bypass	None	https://t.me/kirill_wow https://twitter.com/kirill_wow	None	None	3	0	1	10	0	C,JavaScript,PHP	85	20
ShikariSenpai	Leak-NTLM-hash-via-HTML - 可用于泄露 NTLM Hash 的 HTML 标签列表:	https://github.com/ShikariSenpai/Leak-NTLM-hash-via-HTML	None		None	None	3	0	2	10	4	Python,HTML	26	5
Quikko	BuQuikker - 快速寻找错误配置的 AWS S3 Buckets 的工具:	https://github.com/Quikko/BuQuikker	None		None	None	17	0	56	10	2	Python,Go,PHP	22	3
n0dec	MalwLess - 通过规则直接生成 Sysmon 以及 PowerShell 事件日志的工具,旨在协助蓝队测试防御规则:	https://github.com/n0dec/MalwLess	https://twitter.com/n0dec	Security reseacher. Infosec.	Internet	None	3	0	8	9	7	C#	0	0
gfek	Hunting Newly Registered Domains	https://github.com/gfek/Hunting-New-Registered-Domains	None		None	None	8	0	0	9	5	Python	62	11
ceh-tn	The-Axer - 使用 msfvenom 创建 payload 的辅助工具:	https://github.com/ceh-tn/The-Axer	None		None	None	1	0	0	9	0	Python	99	30
amolnaik4	Bodhi - 专注于学习利用客户端 Web 漏洞的虚拟环境:	https://github.com/amolnaik4/bodhi	https://twitter.com/amolnaik4		None	None	1	0	0	9	0	HTML	75	19
WinHeapExplorer	WinHeap-Explorer - 检测 Windows 应用基于堆的错误的 POC 项目:	https://github.com/WinHeapExplorer/WinHeap-Explorer	None		None	None	2	0	2	9	0	Python,C++	118	18
D0g3-Lab	AXB-CTF: 2018 第一届安洵杯 题目环境/源码/WP	https://github.com/D0g3-Lab/AXB-CTF	https://www.d0g3.cn/		Chengdu,China	D0g3	1	0	0	9	0	JavaScript	19	8
dkhuuthe	MADLIRA - 使用机器学习和信息检索进行 Android 恶意软件检测的工具:	https://github.com/dkhuuthe/MADLIRA	None		None	None	5	0	0	8	0	Java,C++	64	25
cosine0	amphitrite - 基于 triton、pintool 、elftool 的一款符号调试工具:	https://github.com/cosine0/amphitrite	None		None	None	24	0	9	8	4	Python,C++	23	7
bsvineethiitg	malwaregan - 恶意软件行为可视化与主动防御工具:	https://github.com/bsvineethiitg/malwaregan	https://www.linkedin.com/in/bhaskaraiitg	Samsung AI Research Toronto , Grad Student in CS at University of Toronto , B.Tech., IIT Guwahati	Toronto, Canada	University of Toronto	22	0	75	8	64	Python,MATLAB,C++	0	0
P4T12ICK	ypsilon - 自动化安全用例测试环境:	https://github.com/P4T12ICK/ypsilon	https://patrick-bareiss.com		None	None	4	0	7	8	0	TeX,Python	87	12
Mind0xP	Frida-Python-Binding - 用于协助 Android 自动化逆向分析的 Frida Python 绑定脚本:	https://github.com/Mind0xP/Frida-Python-Binding	None		None	None	4	0	14	8	2	Python	87	15
whitel1st	GP_Hijack - 组策略劫持攻击利用脚本:	https://github.com/whitel1st/GP_Hijack	None		None	None	7	0	90	7	17	Python	0	0
pFarb	awesome-crypto-papers - 一份关于密码学相关论文、教程等的收集列表 :	https://github.com/pFarb/awesome-crypto-papers	https://github.com/cossacklabs	Pavlo. Ukrainian Armed Forces vet. Earn my living thinking about cryptographic and security problems. Have grumpy character and poor spelling skills.	Kyiv	@cossacklabs	3	0	0	7	0		646	66
olegzhr	Altprobe - IDS events collector	https://github.com/olegzhr/altprobe	None		None	None	5	0	46	7	0	Shell,Java,C++	33	7
junliangliu	captcha: 基于CNN的验证码整体识别	https://github.com/junliangliu/captcha	None	机器学习、深度学习、量化投资	None	None	10	0	18	7	2	Python,Jupyter	85	27
eclypsium	远程攻击 BIOS ,来自 Blackhat USA 2018 : https://github.com/eclypsium/Publications/blob/master/2018/BlackHat_USA_2018/BH2018_REMOTELY_ATACKING_SYSTEM_FIRMWARE_FINAL.pdf Additional details 版本:	https://github.com/eclypsium/Publications/blob/master/2018/BlackHat_USA_2018/BH2018_REMOTELY_ATACKING_SYSTEM_FIRMWARE_FINAL.pdf	None		None	None	2	0	0	7	0		23	4
bonkc	Tools to gather subdomains from Bug Bounty programs	https://github.com/bonkc/BugBountySubdomains	None		None	None	6	0	17	7	0	Python,C,Ruby	53	12
avielw	kplugs - Linux 内核模块,提供在 Linux 内核中动态执行脚本的接口:	https://github.com/avielw/kplugs	None		None	None	4	0	0	7	0	C	0	0
Shallownight	DNS-Analysis: 非法域名挖掘与画像系统	https://github.com/Shallownight/DNS-Analysis	None	https://shallownight.github.io/	None	None	12	0	7	7	1	JavaScript,HTML,Vue	0	0
ChrisAD	ads-payload - 通过执行 ADS 流文件以绕过端点防御的工具:	https://github.com/ChrisAD/ads-payload	None		None	None	5	0	12	7	6	Batchfile,JavaScript,PowerShell	39	10
mnrkbys	vss_carver - 提取和修改 Windows 磁盘镜像 VSS catalog 的工具:	https://github.com/mnrkbys/vss_carver	None		Tokyo, Japan	Internet Initiative Japan Inc.	15	0	19	6	4	Python	0	0
frank6696	第二届阿里云安全算法挑战赛 MJ_3DSUN 队解题方法	https://github.com/frank6696/tianchi-aliyun-security-competition	None		None	None	13	0	3	6	0	Python,Jupyter,Java,C++	10	6
darkw1z	Ps1jacker - 生成 COM 劫持 Payload 的工具:	https://github.com/darkw1z/Ps1jacker	None		Ljubljana, Slovenia	None	9	0	1	6	0	Python,Kotlin,JavaScript,Java,CSS	0	0
Kondara	CTF BlazeFox 的 Exploit 代码:	https://github.com/Kondara/BlazeFox	None		None	None	4	0	0	6	0	C#,JavaScript	18	8
CboeSecurity	password_pwncheck - 企业账户密码质量检测工具:	https://github.com/CboeSecurity/password_pwncheck	None		None	None	2	0	1	6	0	Shell,C++	129	16
thomasbiege	研究员 Thomas Biege 分享的一些关于安全编码的 PPT:	https://github.com/thomasbiege/slides/tree/master/Secure%20Programming	None	Cyber security research and management since the late 90s.	None	None	3	0	0	5	0	PostScript,C,HTML	8	0
mikesiegel	ews-crack - Exchange ews 接口的暴力破解脚本:	https://github.com/mikesiegel/ews-crack	None		None	None	6	0	139	5	29	Python,Go	111	26
gr4ym4ntx	attackintel - 查询 MITRE ATT&CK API 获取对应策略,技术的 Python 脚本:	https://github.com/gr4ym4ntx/attackintel	https://gr4ym4ntx.pythonanywhere.com/		None	None	3	0	3	5	11	Python,Batchfile	61	20
dienuet	crossdomain - 一款自动检测跨域错误配置的工具:	https://github.com/dienuet/crossdomain	None	you can see me !!!	None	None	11	0	9	5	1	Python,PHP,CSS	25	9
Truneski	使用 Dropbox 作为 Cobaltstrike 的 C2 传输通道: https://truneski.github.io/blog/2018/11/05/cobaltstrike-over-external-c2-via-dropbox/ GitHub:	https://github.com/Truneski/external_c2_framework	https://truneski.github.io/		Nairobi, Kenya.	None	10	0	25	5	0	Python,PowerShell,CSS	46	12
Kutim	docker-security: docker 安全基线规范	https://github.com/Kutim/docker-security	None		None	None	282	0	5	5	4	Python,Jupyter,C++	58	17
vysec	利用 Adobe Flash 最近修复的 CVE-2018-4878 野外 0Day 攻击 IE 浏览器的 Exploit 脚本:	https://github.com/vysec/CVE-2018-4878	None		None	None	0	0	0	4	0		0	0
lukdog	backtolife - 内存取证工具,从转储的内存中重组进程信息:	https://github.com/lukdog/backtolife	http://lucadoglione.altervista.org	Masters Degree on Software Engineering at Politecnico di Torino. Software Developers in many fields, Im specialized in Web Development.	None	None	4	0	6	4	6	Python,C#,PHP	0	0
ac-mercury	mercuryiss-kali:Kali Linux Docker 容器:	https://github.com/ac-mercury/mercuryiss-kali	None		None	None	3	0	0	4	0	Shell,HTML	36	2
xssfile	Attack-data: A collection of pentest and development tips	https://github.com/xssfile/Attack-data	None		None	None	8	0	0	3	0	Python,C,Shell	17	4
remyLucas	RansomwareDetector 勒索软件检测工具	https://github.com/remyLucas/RansomwareDetector	None		None	None	1	0	0	3	0	C	10	4
mortedamos	车辆 Hacking 设置指南 Part 0:	https://github.com/mortedamos/vehicle-hacking/wiki/Vehicle-Hacking-Setup-Guide:-Part-0:-Introduction	None		None	None	3	0	1	3	4	PHP	32	6
jamieparfet	Apache OFBiz (version< 16.11.04) 的两个 XXE 注入漏洞利用( CVE-2018-8033、CVE-2011-3600):	https://github.com/jamieparfet/Apache-OFBiz-XXE/	None		None	None	6	0	97	3	4	Python,Shell,HTML	0	0
destine21	ZIPFileRaider - 自动化测试 Web 应用 ZIP 处理漏洞的 Burp 插件:	https://github.com/destine21/ZIPFileRaider	None		None	None	11	0	2	3	0	Python,Visual,JavaScript,HTML	53	9
cksgf	ServerManagement: 服务器管理工具	https://github.com/cksgf/ServerManagement	None	找工作中....	None	None	8	0	6	3	0	Python,JavaScript	139	54
3rdbody	IoTSecurityNAT: IoT安全测试系统	https://github.com/3rdbody/IoTSecurityNAT	None		None	None	7	0	1	3	1	Python,Ruby,JavaScript,Java	0	0
yt0ng	Dont push the button or I will Yara you down, VirusTotal 平台支持自定义 Yara 规则,实时检索或发现恶意软件以及企业相关的威胁向量:	https://github.com/yt0ng/SAS/blob/master/MNeis_dont_push_the_button_SAS2017_PUBLIC.pdf	None		None	None	6	0	0	2	0	Python,C	11	1
theInfectedDrake	TIDoS-Framework - Web 应用渗透测试框架:	https://github.com/theInfectedDrake/TIDoS-Framework	https://github.com/0xInfection	This profile has moved to @0xInfection. Youll find all repositories there. Sorry for any inconvenience and trouble. :( https://github.com/0xInfection	https://twitter.com/0xInfection	None	0	0	0	1	0		0	0
sshsshy	ZeroTrace - 在支持 Intel-SGX 服务器设备上启用 Oblivious-RAM(ORAM)实例的系统: https://github.com/sshsshy/ZeroTrace Paper:	https://github.com/sshsshy/ZeroTrace	None		None	None	1	0	0	1	0	C++	23	2
pierrebarlet	qradar2thehive - 链接 QRadar SIEM 和 TheHive 项目的 Python 脚本:	https://github.com/pierrebarlet/qradar2thehive	None	Security engineer. @pierre_barlet Profile picture logo create from original snake logo by Lorc: http://lorcblog.blogspot.com/	France	None	1	0	7	1	2	Python	16	0
Pl4gue	spectre meldown attack demo	https://github.com/Pl4gue/spectre-attack-demo	None	Learner	None	None	1	0	0	1	1	CSS	0	0
xfee	vbg - 通过 X11 转发会话在 SSH 客户端上注入 Keystrokes 的工具:	https://github.com/xfee/vbg	http://github.com/xfee	Bio是什么，帅算不算(｀・ω・´)	北京市朝阳区	None	6	0	44	0	6	HTML,Vim	1	0
x73x61x6ex6ax61x79	DomainRecon - 集成多种工具于一身的自动化子域名收集工具:	https://github.com/x73x61x6ex6ax61x79/DomainRecon	None	None	None	None	0	0	0	0	0	None	0	0
writeups	iOS 安全资料收集:	https://github.com/writeups/iOS	None	None	None	None	0	0	0	0	0	Shell	0	0
viraintel	OWASP-Nettacker - 一款自动化的渗透测试框架:	https://github.com/viraintel/OWASP-Nettacker	None	None	None	None	0	0	0	0	0	None	0	0
ucbrise	confluo: Real-time Monitoring and Analysis of Data Streams	https://github.com/ucbrise/confluo	None	None	None	None	0	0	0	0	0	Jupyter,Assembly,Python,JavaScript,Scala,C++,TeX,HTML,Go,Java,CSS	0	0
taipan-scanner	Taipan: Web application security scanner	https://github.com/taipan-scanner/Taipan	None	None	None	None	0	0	0	0	0	None	0	0
switchbrew	nx-hbexploit300-obf - Homebrew exploit for 3.0.0:	https://github.com/switchbrew/nx-hbexploit300-obf	None	None	None	None	0	0	0	0	0	C,Python,JavaScript,Makefile,HTML,CSS	0	0
sdnewhop	针对 SD-WAN 的安全性研究:	https://github.com/sdnewhop/sdwannewhope/blob/master/sdwan-poc2018.pdf	None	None	None	None	0	0	0	0	0	Python,Lua,C,Go	0	0
scanmem	scanmem - Linux 内存扫描工具:	https://github.com/scanmem/scanmem	None	None	None	None	0	0	0	0	0	C	0	0
robotattackorg	robot-detect - ROBOT 漏洞检测脚本 :	https://github.com/robotattackorg/robot-detect	None	None	None	None	0	0	0	0	0	Python	0	0
python-security	pyt - 用于检测 Python Web 应用安全漏洞的静态扫描工具:	https://github.com/python-security/pyt	None	None	None	None	0	0	0	0	0	Python	0	0
pentesteracademy	patoolkit: a collection of traffic analysis plugins focused on security	https://github.com/pentesteracademy/patoolkit	None	None	None	None	0	0	0	0	0	Lua,C,JavaScript,C++	0	0
nezha-dt	nezha - 一款差分模糊测试工具:	https://github.com/nezha-dt/nezha	None	None	None	None	0	0	0	0	0	C++	0	0
micle-fm	Parat - Python 实现的远程控制工具:	https://github.com/micle-fm/Parat	None	None	None	None	0	0	0	0	0	None	0	0
log2timeline	dftimewolf: A framework for orchestrating forensic	https://github.com/log2timeline/dftimewolf	None	None	None	None	0	0	0	0	0	Python,Shell	0	0
lazycatzh	news_feed: 实时监控1000家中国企业的新闻动态	https://github.com/lazycatzh/news_feed	None	None	None	None	0	0	0	0	0	None	0	0
kromtech	s3-inspector - 检测 AWS S3 Bucket 权限的工具:	https://github.com/kromtech/s3-inspector	None	None	None	None	0	0	0	0	0	Python,Objective-C,C	0	0
knrdl	yamot - 基于 Web 的 Linux/BSD 服务器监控工具:	https://github.com/knrdl/yamot	None		Berlin, Germany	None	1	0	0	0	0	HTML	0	0
islamTaha12	Python Remote Administration Tool (RAT) to gain meterpreter session	https://github.com/islamTaha12/Python-Rootkit	None	None	None	None	0	0	0	0	0	None	0	0
iovisor	bpftrace 使用教程:	https://github.com/iovisor/bpftrace/blob/master/docs/tutorial_one_liners.md	None	None	None	None	0	0	0	0	0	C,Shell,Python,JavaScript,C++,HTML,Go	0	0
inory009	CTF-Web-Challenges:历届 CTF开源的Web 题源码	https://github.com/inory009/CTF-Web-Challenges	None	None	None	None	0	0	0	0	0	None	0	0
iabem97	iOS 11.3/15E5189f Security Server 服务(securityd)溢出漏洞 PoC:	https://github.com/iabem97/securityd-racer2	None	None	None	None	0	0	0	0	0	None	0	0
honeytrap	honeytrap - 一款蜜罐框架:	https://github.com/honeytrap/honeytrap	None	None	None	None	0	0	0	0	0	Shell,Lua,HTML,Go,Ruby,CSS	0	0
creditease-sec	insight: 洞察-应用系统资产/漏洞全生命周期/安全知识库平台	https://github.com/creditease-sec/insight?from=timeline&isappinstalled=0	None	None	None	None	0	0	0	0	0	JavaScript	0	0
colental	BYOB - 打造你自己的 Botnet:	https://github.com/colental/byob	None	None	None	None	0	0	0	0	0	None	0	0
cisco-config-analysis-tool	ccat - Cisco 配置分析工具:	https://github.com/cisco-config-analysis-tool/ccat	None	None	None	None	0	0	0	0	0	Python	0	0
cSploit	cSploit - 一款开源的 Android 网络分析及渗透测试套件:	https://github.com/cSploit/android	None	None	None	None	0	0	0	0	0	C,Java,JavaScript,C++,HTML,Go,Ruby	0	0
blog	Github 宣布移除匿名用户创建 gist 的功能:	https://github.com/blog/2503-deprecation-notice-removing-anonymous-gist-creation	None	None	None	None	0	0	0	0	0		0	0
XekriCorp	LeakVM - 针对 Android 系统的安全研究与渗透测试框架:	https://github.com/XekriCorp/LeakVM	None	None	None	None	0	0	0	0	0	None	0	0
UltimateLabs	Zoom - 一个自动化的快速 Wordpress 漏洞扫描器:	https://github.com/UltimateLabs/Zoom	None	None	None	None	0	0	0	0	0	None	0	0
UKHomeOffice	repo-security-scanner - 用于查找 Git 仓库中的敏感信息泄露的工具:	https://github.com/UKHomeOffice/repo-security-scanner	None	None	None	None	0	0	0	0	0	Shell,Java,Scala,Python,JavaScript,HTML,CSS,Go,Dockerfile,HCL	0	0
Turr0n	Firebase - Exploiting Tool 攻击错误配置的 Firebase 数据的工具:	https://github.com/Turr0n/firebase	None		None	None	9	0	28	0	0	Python,CSS	35	7
SecGen	SecGen: Generate vulnerable virtual machines on the fly	https://github.com/SecGen/SecGen	None	None	None	None	0	0	0	0	0	Ruby	0	0
PowerShellMafia	提取 BitLocker 磁盘加密密钥信息的 PowerShell 脚本:	https://github.com/PowerShellMafia/CimSweep/blob/master/CimSweep/Auditing/Bitlocker.ps1	None	None	None	None	0	0	0	0	0	PowerShell	0	0
Netflix-Skunkworks	diffy - 由 Netflix 的安全情报和响应团队(SIRT)开发的数字取证及事件响应(DFIR)工具:	https://github.com/Netflix-Skunkworks/diffy	None	None	None	None	0	0	0	0	0	Groovy,C,Shell,Java,Scala,Python,JavaScript,C++,Go,Ruby	0	0
LongSoft	ToshibaComExtractor - Toshiba .COM 固件提取工具:	https://github.com/LongSoft/ToshibaComExtractor	None	None	None	None	0	0	0	0	0	C,Shell,Rust,C++	0	0
LOLBAS-Project	LOLBAS - 可以直接用作攻击工具的,系统自带的二进制文件和脚本(包括动态库):	https://github.com/LOLBAS-Project/LOLBAS	None	None	None	None	0	0	0	0	0	HTML,XSLT	0	0
IDAConnect	IDAConnect - 用于 IDA Pro 和 Hex-Rays 的逆向工程协同插件:	https://github.com/IDAConnect/IDAConnect	None	None	None	None	0	0	0	0	0	None	0	0
GreatSCT	GreatSCT - 生成绕过 Windows 应用白名单限制的 Payload 工具:	https://github.com/GreatSCT/GreatSCT	None	None	None	None	0	0	0	0	0	Python	0	0
GoASTScanner	Go AST Scanner：Inspects source code for security problems	https://github.com/GoASTScanner/gas	None	None	None	None	0	0	0	0	0	None	0	0
Go0s	LFIboomCTF: 本地文件包含漏洞&&PHP利用协议&&实践源码	https://github.com/Go0s/LFIboomCTF	None	None	None	None	0	0	0	0	0	None	0	0
G-E-N-E-S-I-S	loadlibrayy - x64 PE 注入工具:	https://github.com/G-E-N-E-S-I-S/loadlibrayy	None	None	None	None	0	0	0	0	0	None	0	0
ExpLife	Analysis-Tools: 恶意软件分析套件	https://github.com/ExpLife/Analysis-Tools	None	None	None	None	0	0	0	0	0	None	0	0
Eitenne	roxysploit - 漏洞利用框架:	https://github.com/Eitenne/roxysploit	None	None	None	None	0	0	0	0	0	None	0	0
DarkSpiritz	DarkSpiritz - 针对 UNIX 系统的渗透测试框架:	https://github.com/DarkSpiritz/DarkSpiritz	None	None	None	None	0	0	0	0	0	None	0	0
CoreSecurity	SAP-Dissection-plug-in-for-Wireshark - Wireshark 的 SAP 常用协议分析插件:	https://github.com/CoreSecurity/SAP-Dissection-plug-in-for-Wireshark	None	None	None	None	0	0	0	0	0		0	0
CodeCracker-Tools	MegaDumper - 从内存中导出 .NET 程序的工具:	https://github.com/CodeCracker-Tools/MegaDumper	None	None	None	None	0	0	0	0	0	C#	0	0
AngoraFuzzer	Angora - 基于突变的 Fuzz 工具,主要目标是在无符号执行的情况下通过解决路径约束增加分支覆盖率:	https://github.com/AngoraFuzzer/Angora	None	None	None	None	0	0	0	0	0	Shell,JavaScript,C++	0	0
360PegasusTeam	WiFi-Miner-Detector - 之前有报道 星巴克 WiFi 被用来劫持用户笔记本挖矿,这个工具用于检测这种恶意 WiFi:	https://github.com/360PegasusTeam/WiFi-Miner-Detector	None	None	None	None	0	0	0	0	0	Python,C,C++	0	0

日更新程序

python update_daily.py