Find secrets with Gitleaks 🔑

Automated Adversary Emulation Platform

Tools and Techniques for Red Team / Penetration Testing

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

一个小巧的linux内核, 学习linux-kernel和进程调度的好帮手

用驱动的方式窥视linux内核的实现

Security Certification Roadmap HTML5/CSS3 version

A V2Ray client for Android, support Xray core and v2fly core

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, T…

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Adversary tradecraft detection, protection, and hunting

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).

iMonitor（冰镜 - 终端行为分析系统）

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practi…

This map lists the essential techniques to bypass anti-virus and EDR

Open EDR public repository

Application Kernel for Containers

Official Black Hat Arsenal Security Tools Repository

《APT Individual Combat Guide》

一个超大的 Google 全球 IP 扫描范围库

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

A Quantum-Safe Secure Tunnel based on QPP, KCP, FEC, and N:M multiplexing.

XDP抗DDOS防火墙

linux-kernel-exploits Linux平台提权漏洞集合

A golang ebpf libary based on cilium/ebpf and datadog/ebpf.

Linux Runtime Security and Forensics using eBPF

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.