Security
287 items from sbilly/awesome-security ★14,971
-
CakeFuzzer github.com
The ultimate web application security testing tool for CakePHP-based web applications. CakeFuzzer employs a predefined set of attacks that are randomly modified before execution. Leveraging its deep understanding of the Cake PHP framework, Cake Fuzzer launches attacks on all…
-
Amun github.com
Amun Python-based low-interaction Honeypot.
-
OWASP ZAP Node API github.com
Leverage the OWASP Zed Attack Proxy (ZAP) within your NodeJS applications with this official API.
-
sshwatch github.com
IPS for SSH similar to DenyHosts written in Python. It also can gather information about attacker during the attack in a log.
-
Suricata suricata-ids.org
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors.
-
Spyse spyse.com
Spyse is an OSINT search engine that provides fresh data about the entire web. All the data is stored in its own DB for instant access and interconnected with each other for flexible search. Provided data: IPv4 hosts, sub/domains/whois, ports/banners/protocols, technologies…
-
Snort snort.org
Snort is a free and open source network intrusion prevention system (NIPS) and network intrusion detection system (NIDS)created by Martin Roesch in 1998. Snort is now developed by Sourcefire, of which Roesch is the founder and CTO. In 2009, Snort entered InfoWorld's Open Source…
-
rkhunter rkhunter.sourceforge.net
A Rootkit Hunter for Linux
-
pfSense pfsense.org
Firewall and Router FreeBSD distribution.
-
OPNsense opnsense.org
is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of…
-
OpenVPN openvpn.net
OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that…
-
dotPeek jetbrains.com
Free-of-charge standalone tool based on ReSharper's bundled decompiler.
-
Databunker databunker.org
Databunker is an address book on steroids for storing personal data. GDPR and encryption are out of the box.
-
GuardRails github.com
GitHub app that provides security feedback in pull requests.
-
Falco falco.org
A cloud-native runtime security project used as a Kubernetes threat detection engine.
-
Security Acronyms github.com
A curated list of security related acronyms and concepts
-
UDcide github.com
Android Malware Behavior Editor.
-
zeek2es github.com
An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek's TSV logs!
-
recon github.com
a fast Rust based CLI that uses SQL to query over files, code, or malware with content classification and processing for security experts
-
Finshir github.com
A coroutines-driven Low & Slow traffic generator, written in Rust.
-
Trust Scan github.com
URL security scanner with WHOIS, SSL, threat intelligence (URLhaus, PhishTank, Spamhaus), and 40+ scam/phishing pattern detection. Includes optional AI analysis via Ollama. (Demo)
-
TerraSigma github.com
A repository of all SIGMA rules converted to Microsoft Sentinel Terraform Scheduled analytic resources. The repository runs on a weekly schedule to update the repository and align with the up to date version of the SIGMA rules repository. Proper entity mapping is completed for…
-
Sigma2KQL github.com
A repository of all SIGMA rules converted to KQL that runs on a weekly schedule to update the repository and align with the up to date version of the SIGMA rules repository.
-
Android Storage Extractor github.com
A tool to extract local data storage of an Android application in one click.
-
Awesome Container Security github.com
A curated list of awesome resources related to container building and runtime security
-
AMExtractor github.com
AMExtractor can dump out the physical content of your Android device even without kernel source code.
-
Whonix whonix.org
Operating System designed for anonymity.
-
tsurugi tsurugi-linux.org
heavily customized Linux distribution that designed to support DFIR investigations, malware analysis and OSINT activities. It is based on Ubuntu 20.04(64-bit with a 5.15.12 custom kernel)
-
Tails OS tails.boum.org
Tails is a portable operating system that protects against surveillance and censorship.
-
Qubes OS qubes-os.org
Qubes OS is a free and open-source security-oriented operating system meant for single-user desktop computing.
-
Prelude prelude-siem.org
Prelude is a Universal "Security Information & Event Management" (SIEM) system. Prelude collects, normalizes, sorts, aggregates, correlates and reports all security-related events independently of the product brand or license giving rise to such events; Prelude is "agentless".
-
PhishStats phishstats.info
Phishing Statistics with search for IP, domain and website title.
-
passbolt passbolt.com
The password manager your team was waiting for. Free, open source, extensible, based on OpenPGP.
-
Security Checklist by OWASP owasp.org
A checklist by OWASP for testing web applications based on assurance level. Covers multiple topics like Architecture, IAM, Sanitization, Cryptography and Secure Configuration.
-
ZAP owasp.org
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new…
-
OWASP owasp.org
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software.
-
ntopng ntop.org
Ntopng is a network traffic probe that shows the network usage, similar to what the popular top Unix command does.
-
PF_RING ntop.org
PF_RING is a new type of network socket that dramatically improves the packet capture speed.
-
netsniff-ng netsniff-ng.org
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel…
-
MISP - Open Source Threat Intelligence Platform misp-project.org
MISP threat sharing platform is a free and open source software helping information sharing of threat intelligence including cyber security indicators. A threat intelligence platform for gathering, sharing, storing and correlating Indicators of Compromise of targeted attacks…
-
Secure by Design manning.com
Book that identifies design patterns and coding styles that make lots of security vulnerabilities less likely. (early access, published continuously, final release fall 2017)
-
Grokking Web Application Security manning.com
A book about building web apps that are ready for and resilient to any attack.
-
Kali kali.org
Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker)…
-
Security related Operating Systems @ Rawsec inventory.raw.pm
Complete list of security related operating systems
-
official WPScan hub.docker.com
-
Vulnerable WordPress Installation hub.docker.com
-
Security Ninjas hub.docker.com
-
OWASP Security Shepherd hub.docker.com
-
Vulnerability as a service: Shellshock hub.docker.com
-
Vulnerability as a service: Heartbleed hub.docker.com
- next page of items loading…
