• Stars
    star
    117
  • Rank 301,828 (Top 6 %)
  • Language
    Go
  • License
    MIT License
  • Created almost 3 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

一个由长亭自研,直观而可扩展的容器安全 SDK

libVeinMind: 问脉容器安全 SDK

容器安全见筋脉,望闻问切治病害。

问脉 (TM) SDK 提供了容器安全领域所关心的容器、镜像和运行时等对象的信息获取、镜像内容器访问等相关操作。并进行合理的抽象以提高容器安全工具对 Docker、Containerd 和 Kubernetes 等不同容器产品的兼容性,简化容器安全工具的开发和维护。

问脉 SDK 是问脉 (TM) 容器安全开源工具箱编译和运行所需的依赖,您也可以基于问脉 SDK 开发符合自己需求的容器安全工具。

问脉 SDK 中的接口部分在本仓库中进行了开源,实现部分采取免费闭源的方式提供给用户。

快速开始

一般情况下,应用应以平行容器的方式发布和部署,用户无需额外安装依赖。如何以平行容器方式构建与发布应用,详见平行容器说明文档。

若应用只支持本地运行,或需要搭建本地环境进行开发,则需要先安装对应平台下的问脉 SDK 软件包。

软件安装包元信息中包含问脉 SDK 的相关许可协议,在开发和使用时请遵守许可协议。当您下载并安装 SDK 软件包后即视为您已同意问脉 SDK 使用协议。

在 Ubuntu 和 Debian 平台下,添加问脉 SDK 的 APT 仓库即可安装所需软件包:

echo 'deb [trusted=yes] https://download.veinmind.tech/libveinmind/apt/ ./' | sudo tee /etc/apt/sources.list.d/libveinmind.list
sudo apt-get update
sudo apt-get install libveinmind-dev

在 RedHat 和 CentOS 平台下,添加问脉 SDK 的 yum 仓库即可安装所需软件包:

sudo cat > /etc/yum.repos.d/libveinmind.repo << ==EOF==
[libveinmind]
name=libVeinMind SDK yum repository
baseurl=https://download.veinmind.tech/libveinmind/yum/
enabled=1
gpgcheck=0
==EOF==
sudo yum install libveinmind-devel

开发指南

联系我们

  1. 您可以通过 GitHub Issue 直接进行 Bug 反馈和功能建议。

  2. 您扫描下方二维码可以通过添加问脉小助手,以加入问脉用户讨论群进行详细讨论:

More Repositories

1

SafeLine

serve as a reverse proxy to protect your web services from attacks and exploits.
Go
12,190
star
2

xray

一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Vue
10,354
star
3

passionfruit

[WIP] Crappy iOS app analyzer
Vue
1,664
star
4

veinmind-tools

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集
Go
1,517
star
5

rad

1,424
star
6

xpoc

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.
984
star
7

cloudwalker

CloudWalker Platform
Go
671
star
8

blazehttp

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.
Go
626
star
9

sqlchop

[DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.
250
star
10

xapp

225
star
11

strapdown-zeta

Instant and elegant Markdown documents in the browser, Git powered markdown wiki server, mathjax and theme support, and many more features!
JavaScript
166
star
12

collie

牧云社区版
TypeScript
147
star
13

xtools

JavaScript
145
star
14

xray-plugins

124
star
15

Real-World-CTF-6th-Challenges

attachments and (some) writeups/source code for RWCTF 6th
108
star
16

pro

A crappy tool used in our private PS4 jailbreak
Python
99
star
17

safeline-open-platform

Lua
96
star
18

yanshi

A regular language recognizer generater like Ragel, enhanced with features to approximate context-free grammars and substring grammars
C++
92
star
19

Real-World-CTF-3rd-Challenge-Attachments

Challenge attachments for RWCTF 3rd.
90
star
20

log4j2-vaccine

log4j2-vaccine
Java
85
star
21

django-pg-partitioning

A Django extension that supports PostgreSQL 11 time ranges and list partitioning.
Python
77
star
22

lua-resty-t1k

Lua implementation of the T1K protocol for Chaitin/SafeLine WAF
Perl
59
star
23

mimicry

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Dockerfile
54
star
24

Real-World-CTF-5th-Challenges

attachments and (some) writeups/source code for RWCTF 5th
Python
54
star
25

Real-World-CTF-3rd-Forum-Attachments

attachments for forum of RealWorld CTF 3rd
C
40
star
26

sqlchop-http-proxy

SQLChop reverse http proxy module
JavaScript
32
star
27

Real-World-CTF-4th-Challenge-Attachments

26
star
28

systracer

SysTracer: Linux 系统活动跟踪器
Go
25
star
29

Real-World-CTF-2019-Quals-Attachment

23
star
30

gamma

16
star
31

xray_document

HTML
15
star
32

duty.html

A single page for daily duty assignment
HTML
12
star
33

querystring

Parse and stringify URL query strings
TypeScript
12
star
34

veinmind-action

基于 veinmind-tools 实现的 Github Action
Dockerfile
8
star
35

collie-app-cli

本地使用 Collie 应用或开发 Collie 应用的 CLI 工具
Rust
8
star
36

telewriter

Another jQuery typing animation script.
JavaScript
7
star
37

traefik-safeline

Traefik plugin to proxy requests to safeline waf
Go
2
star
38

veinmind-common-go

Go
2
star
39

browserslist-config-monster

JavaScript
2
star
40

veinmind-jenkins

Groovy
2
star
41

t1k-go

Go
2
star
42

veinmind-orb

1
star
43

xray-docs

MDX
1
star