Security
287 items from sbilly/awesome-security ★14,971
-
Meerkat github.com
PowerShell-based Windows artifact collection for threat hunting and incident response.
-
hardened_malloc github.com
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
-
Rekall github.com
The Rekall Framework is a completely open collection of tools, implemented in Python under the Apache and GNU General Public License, for the extraction and analysis of digital artifacts computer systems.
-
FireEye OpenIOCs github.com
FireEye Publicly Shared Indicators of Compromise (IOCs)
-
Vault vaultproject.io
An encrypted datastore secure enough to hold environment and application secrets.
-
Wireshark wireshark.org
The world’s foremost and widely-used network protocol analyzer.
-
passivedns github.com
A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring (NSM) and general digital forensics. PassiveDNS sniffs traffic from an interface or reads a pcap-file and outputs the DNS-server answers to a log file. PassiveDNS can cache/aggregate…
-
open-appsec github.com
open-appsec is an open source machine-learning security engine that preemptively and automatically prevents threats against Web Application & APIs.
-
LunaSec github.com
Database for PII with automatic encryption/tokenization, sandboxed components for handling data, and centralized authorization controls.
-
reFlutter github.com
Flutter Reverse Engineering Framework
-
redoctober github.com
Server for two-man rule style file encryption and decryption.
-
Redcloud github.com
A automated Red Team Infrastructure deployement using Docker.
-
Artemis github.com
A modular vulnerability scanner with automatic report generation capabilities.
-
IntelMQ github.com
IntelMQ is a solution for CERTs for collecting and processing security feeds, pastebins, tweets using a message queue protocol. It's a community driven initiative called IHAP (Incident Handling Automation Project) which was conceptually designed by European CERTs during several…
-
Pompem github.com
Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases…
-
CIFv2 github.com
CIF is a cyber threat intelligence management system. CIF allows you to combine known malicious threat information from many sources and use that information for identification (incident response), detection (IDS) and mitigation (null route).
-
enjarify github.com
A tool for translating Dalvik bytecode to equivalent Java bytecode.
-
padding-oracle-attacker github.com
padding-oracle-attacker is a CLI tool and library to execute padding oracle attacks (which decrypts data encrypted in CBC mode) easily, with support for concurrent network requests and an elegant UI.
-
passpie github.com
Multiplatform command-line password manager
-
Apache Metron (incubating) github.com
Metron integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
-
OSX Security Awesome github.com
A collection of OSX and iOS security resources
-
data_hacking github.com
Examples of using IPython, Pandas, and Scikit Learn to get the most out of your security data.
-
FingerprintJS Android github.com
Identifies Android application users even when they purge data storage. Allows you to detect account takeovers, account sharing and repeated malicious activity.
-
Preflight github.com
helps you verify scripts and executables to mitigate supply chain attacks in your CI and other systems.
-
OpenSOC github.com
OpenSOC integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
-
Insider CLI github.com
A open source Static Application Security Testing tool (SAST) written in GoLang for Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C# and Javascript (Node.js).
-
PFQ github.com
PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission (10G and beyond), in-kernel functional processing and packets steering across sockets/end-points.
-
monsoon github.com
Very flexible and fast interactive HTTP enumeration/fuzzing.
-
HoneyPy github.com
HoneyPy is a low to medium interaction honeypot. It is intended to be easy to: deploy, extend functionality with plugins, and apply custom configurations.
-
BoxyHQ github.com
Open source API for security and compliance audit logging.
-
Safe github.com
A Vault CLI that makes reading from and writing to the Vault easier to do.
-
HonSSH github.com
HonSSH is a high-interaction Honey Pot solution. HonSSH will sit between an attacker and a honey pot, creating two separate SSH connections between them.
-
Apache Spot (incubating) github.com
Apache Spot is open source software for leveraging insights from flow and packet analysis.
-
ACSTIS github.com
ACSTIS helps you to scan certain web applications for AngularJS Client-Side Template Injection (sometimes referred to as CSTI, sandbox escape or sandbox bypass). It supports scanning a single request but also crawling the entire web application for the AngularJS CSTI…
-
Zeek zeek.org
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
-
virustotal virustotal.com
VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means…
-
Nmap nmap.org
A free, open-source network scanner used for discovering hosts, services, and vulnerabilities on computer networks through advanced port scanning and OS detection techniques.
-
ironbee github.com
IronBee is an open source project to build a universal web application security sensor. IronBee as a framework for developing a system for securing web applications - a framework for building a web application firewall (WAF).
-
Cyberowl github.com
A daily updated summary of the most frequent types of security incidents currently being reported from different sources.
-
Fastfinder github.com
Fast customisable cross-platform suspicious file finder. Supports md5/sha1/sha256 hashs, litteral/wildcard strings, regular expressions and YARA rules. Can easily be packed to be deployed on any windows / linux host.
-
shellclear github.com
It helps you to Secure your shell history commands by finding sensitive commands in your all history commands and allowing you to clean them.
-
LogESP github.com
Open Source SIEM (Security Information and Event Management system).
-
hadoop-pcap github.com
Hadoop library to read packet capture (PCAP) files.
-
MutableSecurity github.com
CLI program for automating the setup, configuration, and use of cybersecurity solutions.
-
sql_firewall github.com
SQL Firewall Extension for PostgreSQL
-
dotgpg github.com
A tool for backing up and versioning your production secrets or shared passwords securely and easily.
-
DocBleach github.com
An open-source Content Disarm & Reconstruct software sanitizing Office, PDF and RTF Documents.
-
binarypig github.com
Scalable Binary Data Extraction in Hadoop. Malware Processing and Analytics over Pig, Exploration through Django, Twitter Bootstrap, and Elasticsearch.
-
Cyclops github.com
The Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.
-
Cognito Scanner github.com
CLI tool to pentest Cognito AWS instance. It implements three attacks: unwanted account creation, account oracle and identity pool escalation
- next page of items loading…
