trivy-action

Trivy Action 用于 Trivy 的 GitHub Action !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense 目录 用法 扫描 CI 流水线 扫描 CI 流水线（使用 Trivy 配置） 缓存 Trivy 安装 扫描 Tarball 使用模板配合 Trivy 配合 GitHub 代码扫描使用 Trivy 使用 Trivy 扫描您的 Git 仓库 使用 Trivy 扫描您的 rootfs 目录 使用 Trivy...

spamassassin

Apache SpamAssassin GitHub Actions para pruebas El proyecto Apache SpamAssassin utiliza un repositorio de Subversion para su proceso de desarrollo. En GitHub se mantiene un espejo de solo lectura del repositorio aquí. El directorio .github que contiene este archivo README no forma parte del paque...

write-ups

报告 GitHub Desktop v2.9.4 中的远程代码执行漏洞 通过 gh run download 实现远程代码执行 GitHub CLI Claude Code: 通过 .git 工作树混淆从提示注入实现非沙箱代码执行 — CVE-2026-55607...

witcher

witcher 大规模实施和监控应用安全控制。 系统要求 NodeJS 20.13 已测试平台 Mac Ubuntu 安装方法 $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i 构建Docker镜像 $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build -t witcher . 运行Docker镜像 $ docker run -e GITHUBTOKEN=$GITHUBTOKE...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

gitrob

Gitrob：将开源置于 OSINT 之中 Gitrob 是一款帮助发现推送到 GitLab 或 Github 仓库中的潜在敏感信息的工具。Gitrob 会克隆属于某个用户或组/组织的仓库，克隆深度可配置，并遍历提交历史，标记与潜在敏感信息签名匹配的文件和/或提交内容。调查结果将通过 Web 界面呈现，便于浏览和分析。 用法 gitrob options target target2 ... targetN 重要提示 如果你的目标是 GitLab 组，请将组 ID 作为目标参数。你可以在 GitLab 界面中组名的正下方找到组 ID。否则，名称即可作为目标参数。 选项...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

tun2socks

Características Proxy universal : Enruta de forma transparente todo el tráfico de red de cualquier aplicación a través de un proxy. Multiprotocolo : Compatible con proxies HTTP/SOCKS/Shadowsocks/SSH/Relay con autenticación opcional. Multiplataforma : Se ejecuta en...

libperf_event_exploit

此仓库已移至 https://github.com/android-rooting-tools/libperfeventexploit...

CVE-2018-2893

本软件仅限用于学习交流禁止用于任何非法行为 起这个名字主要目的是蹭一下2893的热度，反弹shell生成器 主要作用是生成自己的外网nc监听对象，希望可以帮助到一些代码小白，2893 2628不适用需要借助第三方服务端口生成远程服务 github搬运工...

invoke-antivm

Invoke-AntiVM v1.0 Introduction Invoke-AntiVM is a set of modules to perform VM detection and fingerprinting with exfiltration via Powershell. Compatibility Run the script check-compatibility.ps1 to check what modules or functions are compatibile with the powershell version. Our goal is to achiev...

cve-2018-16509

CVE-2018-16509 这是Cved的一部分： 一个管理易受攻击的Docker容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/cve-2018-16509 镜像作者：https://github.com/knqyf263/CVE-2018-16509...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: ▶ cat domains.txt | waybackurls urls Install: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was inspired by @mhmdiaa's...

vinifera

Vinifera - Monitor Internal Leaks on Github Github Monitoring Tool 🤖 We have been using Vinifera in production since Dec 2019 and has helped us prevent security incidents. Vinifera started out as an internal project to ensure Security hygiene of our public contributions and monitor potential leak...

Shuffle

Automatización Shuffle Desplegar en Shuffle es una plataforma de automatización de código abierto, creada por y para los profesionales de la seguridad. Las operaciones de seguridad son complejas, pero no tienen por qué serlo. Diseñada para funcionar bien con MSSP y otros proveedores de servicios...

octosuite

基于终端的 GitHub 数据分析工具包。 $ octosuite user torvalds from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile 安装 pip install octosuite 用法 TUI（交互式） 启动交互式终端界面： octosuite -t/--tui 使用方向键和回车键导航并选择选项。 CLI 直接从命令行查询 GitHub 数据： 用户数据...

WebGoat

重要信息 这不是你要找的仓库 OWASP WebGoat 项目和代码库的维护地址是：https://github.com/WebGoat...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

VTScanner

VTScanner v1.0 Overview VTScanner is a versatile Python tool that empowers users to perform comprehensive file scans within a selected directory for malware detection and analysis. It seamlessly integrates with the VirusTotal API to deliver extensive insights into the safety of your files...