Security Awesome
- https://github.com/zmap
- jtesta/ssh-audit
- ycd/dstp
- SentryPeer/SentryPeer
- peer to peer list of bad actor IP addresses and phone numbers collected via a SIP Honeypot
- undergroundwires/privacy.sexy
- Open-source tool to enforce privacy & security best-practices on Windows and macOS
- HN
- google/osv.dev
- vulnerability DB and triage service
- soxoj/maigret
- Collect a dossier on a person by username from thousands of sites
- ocsf/ocsf-schema
- vanhauser-thc/thc-hydra
- Apache-2.0
- danielmiessler/SecLists
- DPI bypass
- ValdikSS/GoodbyeDPI
- bypasss DPI for windows
- bol-van/zapret
- for Linux
- ValdikSS/GoodbyeDPI
- Linux
- liamg/traitor
- MIT, Go
- Linux privilege escalation
- liamg/traitor
- Web/滑块验证/机器人
- pavlealeksic/puppeteer-afp
- stop sites from fingerprinting your puppeteer
- https://www.zhihu.com/question/287191234/answer/3521005150
- pavlealeksic/puppeteer-afp
Topic
en | cn |
---|---|
Anti-Bot Verification | 反机器人验证 |
Authentication | 认证 |
Security Verification | 安全验证 |
CAPTCHA | 图像验证码 |
- CAPTCHA - Completely Automated Public Turing test to tell Computers and Humans Apart
- by Luis von Ahn 2000
Algorithm
- https://csrc.nist.gov/Projects/Post-Quantum-Cryptography
- CRYSTALS-Kyber
- https://signal.org/blog/pqxdh/
- iMessage with PQ3
Service
- smicallef/spiderfoot
- MIT, Python
- automates OSINT for threat intelligence and mapping your attack surface
- OSINT - Open-source intelligence
Library
- google/tink
- Java/Android, C++, Obj-C, Go, Python
- 基于 BoringSSL
- jedisct1/libsodium
- portable, easy to use crypto library
- NaCl - Networking and Cryptography library
- wikipedia NaCl
- google/paranoid_crypto
- checks for well known weaknesses on cryptographic
- Idov31/Sandman
- 参考
SSL
impl | license | written in | by | adopted by |
---|---|---|---|---|
BoringSSL | ISC | C, C++, Go | ||
Botan | BSD | C++ | ||
Bouncy Castle | MIT | Java,C# | ||
JSSE | GPLv2 | Java | Oracle | |
LibreSSL | Apache-2.0, BSD, ISC | C | OpenBSD | macOS,OpenBSD,DragonflyBSD |
MbedTLS | Apache-2.0, GPLv2+ | C | ARM | PowerDNS,OpenVPN |
NSS | MPL-2.0 | C | Mozilla... | |
OpenSSL | Apache-2.0 | C | OpenSSL | |
s2n | Apache-2.0, GPLv2+ | Amazon | ||
Secure Transport | APSL-2.0 | Apple | ||
GnuTLS | LGPLv2.1 | C | FSF | |
wolfssl | GPLv2+ | C |
- Botan
- MbedTLS
- 适用于嵌入式场景
- LibreSSL
- 2014-04 - OpenBSD fork OpenSSL
- BoringSSL
- 2014-06 Google fork OpenSSL
- Tink - based on BoringSSL
- JSSE - Java Secure Socket Extension
- NSS - Network Security Services
信息
- 使用最多的是 OpenSSL - OpenSSL 3.0 变动较大
- 2014-04 OpenSSL Heartbleed 事件