xu-xiang/awesome-security-vul-llm本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's directory structure and Readme information, then summarizes, analyzes, and categorizes them. The aggregated projects can help security industry practitioners collect vulnerability information, POC information, rules, and more.
Detailed plans will be updated in aiflows, currently not yet complete
- A collection of Markdown documents containing multiple high-quality web security articles, providing learning resources for Web security
- Security-related resources and tools, including files and subdirectories from 2017-2019.
- Learning reference resources for Kubernetes, Docker, security technology articles and tutorials
- Cybersecurity learning resource library, containing learning materials on various topics such as CTF, Web security, intranet penetration, suitable for learning and research in the cybersecurity field.
- Cybersecurity problem bank covering SQL injection, XSS attacks, CWE common vulnerability exploitation, suitable for learning and practicing cybersecurity techniques.
- Security knowledge learning and recording project, covering red team offense and defense, penetration testing, code auditing, and more.
- Java security study notes, involving ASM, JDBC, Spring, Shiro, and other aspects, with rich practical cases.
- Contains technical documents from 2020 to 2023, used for tracking technological development.
- A community that translates high-quality internet technology articles, including security-related content.
- Open source learning resource library, sharing security and operations knowledge
- PeiQi WiKi-POC library provides knowledge about environment setup, POC, and vulnerability principles, helping people learn various vulnerability-related information.
- WgpSec POC library is an open-source collection of network vulnerability POCs, including environment setup, POCs, and vulnerability principles. It supports online browsing, offline download, and contribution features.
- Web Armory is a CVE knowledge base that can be run via Docker or local compilation, providing convenient vulnerability search functionality.
- An open-source security knowledge base integrating multiple vulnerability libraries, offering Docker deployment options, suitable for security professionals and technology enthusiasts.
- Cybersecurity-related resource links, including offense and defense testing manuals, intranet security documents, learning manual-related resources, checklists and basic security knowledge, product design documents, learning ranges, vulnerability reproduction, open-source vulnerability libraries, etc., suitable for professionals in cybersecurity, red team attacks, and other fields.
- Security blog built with Jekyll, providing the latest cybersecurity news and advice
- Personal blog website containing articles on Java programming language and security domain knowledge
- Provides security-related resources and tools
- CSIRT GitHub project collects incident response related resources, including books, links, and a list of security projects. It also includes tools for encoding, encryption, hashing, and obfuscation, as well as search engines for malware analysis, vulnerabilities, and exploits. The project also contains information on incident response frameworks and standards, such as the CERT model and SIM v3 model.
- A regularly published open-source cybersecurity news magazine covering various information security issues and the latest hot topics.
- Target chain penetration testing guide manual, providing guidance for target chain penetration testing.