• Stars
    star
    115
  • Rank 296,419 (Top 6 %)
  • Language
    Go
  • License
    MIT License
  • Created over 2 years ago
  • Updated 12 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

一个由长亭自研,直观而可扩展的容器安全 SDK

libVeinMind: 问脉容器安全 SDK

容器安全见筋脉,望闻问切治病害。

问脉 (TM) SDK 提供了容器安全领域所关心的容器、镜像和运行时等对象的信息获取、镜像内容器访问等相关操作。并进行合理的抽象以提高容器安全工具对 Docker、Containerd 和 Kubernetes 等不同容器产品的兼容性,简化容器安全工具的开发和维护。

问脉 SDK 是问脉 (TM) 容器安全开源工具箱编译和运行所需的依赖,您也可以基于问脉 SDK 开发符合自己需求的容器安全工具。

问脉 SDK 中的接口部分在本仓库中进行了开源,实现部分采取免费闭源的方式提供给用户。

快速开始

一般情况下,应用应以平行容器的方式发布和部署,用户无需额外安装依赖。如何以平行容器方式构建与发布应用,详见平行容器说明文档。

若应用只支持本地运行,或需要搭建本地环境进行开发,则需要先安装对应平台下的问脉 SDK 软件包。

软件安装包元信息中包含问脉 SDK 的相关许可协议,在开发和使用时请遵守许可协议。当您下载并安装 SDK 软件包后即视为您已同意问脉 SDK 使用协议。

在 Ubuntu 和 Debian 平台下,添加问脉 SDK 的 APT 仓库即可安装所需软件包:

echo 'deb [trusted=yes] https://download.veinmind.tech/libveinmind/apt/ ./' | sudo tee /etc/apt/sources.list.d/libveinmind.list
sudo apt-get update
sudo apt-get install libveinmind-dev

在 RedHat 和 CentOS 平台下,添加问脉 SDK 的 yum 仓库即可安装所需软件包:

sudo cat > /etc/yum.repos.d/libveinmind.repo << ==EOF==
[libveinmind]
name=libVeinMind SDK yum repository
baseurl=https://download.veinmind.tech/libveinmind/yum/
enabled=1
gpgcheck=0
==EOF==
sudo yum install libveinmind-devel

开发指南

联系我们

  1. 您可以通过 GitHub Issue 直接进行 Bug 反馈和功能建议。

  2. 您扫描下方二维码可以通过添加问脉小助手,以加入问脉用户讨论群进行详细讨论:

More Repositories

1

xray

一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Vue
9,727
star
2

SafeLine

一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术,作为反向代理接入,保护你的网站不受黑客攻击。 A free WAF that is sufficiently simple, effective, and powerful. Utilizing industry-leading semantic engine detection technology, it operates as a reverse proxy to protect your website from hacker attacks.
C++
8,603
star
3

passionfruit

[WIP] Crappy iOS app analyzer
Vue
1,657
star
4

veinmind-tools

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集
Go
1,470
star
5

rad

1,382
star
6

xpoc

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.
855
star
7

cloudwalker

CloudWalker Platform
Go
664
star
8

blazehttp

可用于安全测试的非标准HTTP协议解析库
Go
358
star
9

sqlchop

[DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
249
star
10

strapdown-zeta

Instant and elegant Markdown documents in the browser, Git powered markdown wiki server, mathjax and theme support, and many more features!
JavaScript
166
star
11

collie

牧云社区版
TypeScript
128
star
12

Real-World-CTF-6th-Challenges

attachments and (some) writeups/source code for RWCTF 6th
100
star
13

pro

A crappy tool used in our private PS4 jailbreak
Python
99
star
14

xtools

JavaScript
92
star
15

yanshi

A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
C++
90
star
16

Real-World-CTF-3rd-Challenge-Attachments

Challenge attachments for RWCTF 3rd.
90
star
17

safeline-open-platform

Lua
87
star
18

log4j2-vaccine

log4j2-vaccine
Java
85
star
19

django-pg-partitioning

A Django extension that supports PostgreSQL 11 time ranges and list partitioning.
Python
77
star
20

mimicry

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Dockerfile
55
star
21

Real-World-CTF-5th-Challenges

attachments and (some) writeups/source code for RWCTF 5th
Python
52
star
22

lua-resty-t1k

Lua implementation of the T1K protocol for Chaitin/SafeLine WAF
Perl
45
star
23

Real-World-CTF-3rd-Forum-Attachments

attachments for forum of RealWorld CTF 3rd
C
40
star
24

sqlchop-http-proxy

SQLChop reverse http proxy module
JavaScript
32
star
25

Real-World-CTF-4th-Challenge-Attachments

26
star
26

Real-World-CTF-2019-Quals-Attachment

23
star
27

systracer

SysTracer: Linux 系统活动跟踪器
Go
22
star
28

gamma

16
star
29

xray_document

HTML
15
star
30

duty.html

A single page for daily duty assignment
HTML
12
star
31

querystring

Parse and stringify URL query strings
TypeScript
12
star
32

veinmind-action

基于 veinmind-tools 实现的 Github Action
Dockerfile
8
star
33

collie-app-cli

本地使用 Collie 应用或开发 Collie 应用的 CLI 工具
Rust
7
star
34

telewriter

Another jQuery typing animation script.
JavaScript
7
star
35

veinmind-jenkins

Groovy
3
star
36

veinmind-common-go

Go
2
star
37

browserslist-config-monster

JavaScript
2
star
38

veinmind-orb

1
star
39

xray-docs

MDX
1
star