anteon

基于eBPF的Kubernetes监控与性能测试 Anteon 自动生成服务映射图，无需代码插桩或边车（Sidecar）。因此您可以轻松找到系统中的瓶颈。红线表示服务之间的高延迟。 在线演示 • 文档 • Discord 🐝 什么是 Anteon？ Anteon （原名Ddosify）是一个基于eBPF的Kubernetes监控 和性能测试 平台。 🔎 Kubernetes 监控 自动服务映射图创建： Anteon 自动创建集群的服务映射图 ，无需代码插桩或边车。因此您可以轻松找到瓶颈。 性能洞察： 帮助您发现服务响应缓慢或 SQL 查询慢等问题。 实时指标： 平台跟踪并显示集群实例的...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

awesome-hacking-lists

Awesome Stars 精心整理的我的GitHub星标项目清单！由 starred 生成。 目录 ASL ASP.NET ActionScript Ada Arduino Assembly AutoHotkey AutoIt Batchfile BitBake Blade BlitzBasic Boo C C C++ CMake CSS Classic ASP Clojure CodeQL ColdFusion Dart Dockerfile Emacs Lisp Erlang F Fluent FreeMarker Go Groovy HCL HTML Hack Haskell...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

resmack-fuzz-test

Resmack 模糊测试 本项目探索了一个基于反馈的模糊测试工具，它使用： ptrace 进行插桩 通过目标进程指定的动态内存断点 进程快照/恢复 使用 /proc/pid/map、/proc/pid/clearrefs 和 /proc/pid/pagemap 使用 processvmwritev 性能计数器作为反馈机制 语料库管理 此处实现的成功代码和概念将被吸收到 resmack 中，使其成为一个完整的模糊测试工具 而不仅仅是基于语法的数据生成器。 特性/实验 参见博客文章 Resmack: Fuzzing Thoughts - Part 2 了解本项目所做工作的完整说明。 使用方法...

yaraQA

yaraQA YARA 规则分析器，用于提高规则质量和性能 为什么？ YARA 规则可能语法正确但仍然功能失常。yaraQA 尝试发现并向 YARA 规则集的作者或维护者报告这些问题。 yaraQA 尝试检测的问题例如： 由于条件中的错误而语法正确但从未匹配的规则（例如：只有一个字符串且条件中有 2 of them 的规则） 使用了可能错误的字符串与修饰符组合的规则（例如：$ = "\Debug\" fullword） 由短原子、重复字符或循环引起的性能问题（例如：$ = "AA"；可通过 --ignore-performance 排除分析）...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

maude-hcs

Maude-HCS Maude-HCS 是最早的通用模块化工具链之一，用于在现实规模的隐藏通信系统（HCS）中进行形式化规约与推理。它使网络设计者能够快速有效地探索不同的 HCS 设计，并提供设计信任所需的正式隐私-性能保证。 引言 隐藏通信系统（HCS）将秘密消息嵌入正常的网络活动中，以隐藏通信的存在。在实践中，HCS 的不可检测性通常通过特定的流量统计或专用检测器进行评估，这使得安全性声明与实验设置和隐含的对手假设紧密耦合。 Maude-HCS 是一个可执行的建模与分析框架，为推理复杂 HCS...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

brpc

English version bRPC是用C++语言编写的工业级RPC框架，常用于搜索、存储、机器学习、广告、推荐等高性能系统。 "bRPC"的含义是"better RPC" 你可以使用它： 搭建能在一个端口 支持多协议的服务, 或访问各种服务 restful http/https, h2/gRPC。使用bRPC的http实现比libcurl方便多了。从其他语言通过HTTP/h2+json访问基于protobuf的协议. redis和memcached, 线程安全，比官方client更方便。 rtmp/flv/hls, 可用于搭建流媒体服务. hadooprpc可能开源 支持rdma...

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

staekka

Stækka Metasploit - Extendiendo Metasploit Este plugin Msf extiende Metasploit con algunas características y módulos faltantes, permitiendo la interacción con otros exploits/formas de obtener acceso a la shell. El enfoque actual está en el soporte para Linux/Unix. Características principales...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

ProcDump-for-Linux

ProcDump ProcDump 是经典 ProcDump 工具（来自 Windows 的 Sysinternals 套件）在 Linux 和 Mac 上的重新实现。ProcDump 为 Linux 和 Mac 开发者提供了一种便捷的方式，基于性能触发器为应用程序创建核心转储（core dump）。ProcDump for Linux and Mac 是 Sysinternals 的一部分。 安装与使用 系统要求 最低 Linux 操作系统版本： Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubuntu 16.04 LTS gdb =...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

massdns

MassDNS 高性能DNS存根解析器 MassDNS是一个简单的高性能DNS存根解析器，专为需要解析海量域名（数百万甚至数十亿级别）的用户设计。无需特殊配置，MassDNS即可利用公开可用的解析器每秒解析超过35万个域名。 贡献者 Quirin Scheitle，慕尼黑工业大学 编译 克隆Git仓库并cd进入项目根目录。然后运行make从源代码构建。如果你不在Linux上，运行make nolinux。在Windows上，需要Cygwin的gcc-core、git和make包。 用法 Usage: ./bin/massdns options domainlist -b --bindto...