运维 ---------------------------------------- 流量 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `Bro `_ - `Moloch `_ Large scale, open source, indexed packet capture and search - `TCPFlow `_ - `TCPDump `_ - `WireShark `_ - `Argus `_ - `PcapPlusPlus `_ - `ngrep `_ - `cisco joy `_ A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. 堡垒机 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `jumpserver `_ - `CrazyEye `_ - `GateOne `_ 蜜罐 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `Dionaea `_ - `Modern Honey Network `_ - `Cowrie `_ SSH/Telnet蜜罐 - `honeything `_ IoT蜜罐 - `ConPot `_ 工控设施蜜罐 - `MongoDB HoneyProxy `_ - `ElasticHoney `_ - `DCEPT `_ - `Canarytokens `_ - `Honeydrive `_ - `T-Pot `_ - `opencanary `_ - `HFish `_ VPN Install ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `pptp `_ - `ipsec `_ - `openvpn `_ 隧道 / 代理 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `ngrok `_ - `rtcp `_ - `Tunna `_ - `gost `_ GO Simple Tunnel - `reDuh `_ Create a TCP circuit through validly formed HTTP requests - `reGeorg `_ pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn - `Neo-reGeorg `_ Neo-reGeorg is a project that seeks to aggressively refactor reGeorg - `ABPTTS `_ TCP tunneling over HTTP/HTTPS for web application servers 漏洞管理 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `SRCMS `_ 风控 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `nebula `_ - `Liudao `_ - `aswan `_ SIEM ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - `metron `_ - `MozDef `_