Security
287 items from sbilly/awesome-security ★14,971
-
Secure by Design manning.com
Book that identifies design patterns and coding styles that make lots of security vulnerabilities less likely. (early access, published continuously, final release fall 2017)
-
Grokking Web Application Security manning.com
A book about building web apps that are ready for and resilient to any attack.
-
Kali kali.org
Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker)…
-
Security related Operating Systems @ Rawsec inventory.raw.pm
Complete list of security related operating systems
-
official WPScan hub.docker.com
-
Vulnerable WordPress Installation hub.docker.com
-
Security Ninjas hub.docker.com
-
OWASP Security Shepherd hub.docker.com
-
Vulnerability as a service: Shellshock hub.docker.com
-
Vulnerability as a service: Heartbleed hub.docker.com
-
Docker Bench for Security hub.docker.com
-
OWASP WebGoat Project docker image hub.docker.com
-
OWASP Mutillidae II Web Pen-Test Practice Application hub.docker.com
-
Damn Vulnerable Web Application (DVWA) hub.docker.com
-
Gophish getgophish.com
An Open-Source Phishing Framework.
-
DPDK dpdk.org
DPDK is a set of libraries and drivers for fast packet processing.
-
Security @ Distrowatch distrowatch.com
Website dedicated to talking about, reviewing and keeping up to date with open source operating systems
-
Cuckoo Sandbox cuckoosandbox.org
Cuckoo Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment.
-
ClamAv clamav.net
ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
-
fwknop cipherdyne.org
Protects ports via Single Packet Authorization in your firewall.
-
HoneyDrive bruteforce.gr
HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots…
-
AIEngine bitbucket.org
AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDS(Network Intrusion Detection System) functionality, DNS domain classification, network collector, network…
-
AutoShun autoshun.org
AutoShun is a Snort plugin that allows you to send your Snort IDS logs to a centralized server that will correlate attacks from your sensor logs with other snort sensors, honeypots, and mail filters from around the world.
-
OSSIM alienvault.com
OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.
-
Real World Cryptography manning.com
This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications.
-
Lynis is an open source security auditing tool including Docker auditing cisofy.com
an open source security auditing tool for Linux/Unix.
-
Docker Security - Quick Reference binarymist.io
A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques.
-
Xplico xplico.org
The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP, and so on. Xplico isn’t a network…
-
Workbench workbench.readthedocs.org
A scalable python framework for security research and development teams.
-
SecMobi Wiki wiki.secmobi.com
A collection of mobile security resources which including articles, blogs, books, groups, projects, tools and conferences. *
-
w3af w3af.org
w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.
-
Threat Jammer threatjammer.com
REST API service that allows developers, security engineers, and other IT professionals to access curated threat intelligence data from a variety of sources.
-
SSHGuard sshguard.net
A software to protect services in addition to SSH, written in C
-
Sqreen sqreen.io
Sqreen is a Runtime Application Self-Protection (RASP) solution for software teams. An in-app agent instruments and monitors the app. Suspicious user activities are reported and attacks are blocked at runtime without code modification or traffic redirection.
-
sqlmap sqlmap.org
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range…
-
SBL / XBL / PBL / DBL / DROP / ROKSO spamhaus.org
The Spamhaus Project is an international nonprofit organization whose mission is to track the Internet's spam operations and sources, to provide dependable realtime anti-spam protection for Internet networks, to work with Law Enforcement Agencies to identify and pursue spam and…
-
SpamAssassin spamassassin.apache.org
A powerful and popular email spam filter employing a variety of detection technique.
-
Bifrozt sourceforge.net
Bifrozt is a NAT device with a DHCP server that is usually deployed with one NIC connected directly to the Internet and one NIC connected to the internal network. What differentiates Bifrozt from other standard NAT devices is its ability to work as a transparent SSHv2 proxy…
-
The Security Engineer Handbook securityhandbook.io
A short read that discusses the dos and dont's of working in a security team, and the many tricks and tips that can help you in your day-to-day as a security engineer.
-
Scammer-List scammerlist.now.sh
A free open source AI based Scam and Spam Finder with a free API
-
sagan sagan.quadrantsec.com
Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc).
-
Rudder rudder-project.org
Rudder is an easy to use, web-driven, role-based solution for IT Infrastructure Automation & Compliance. Automate common system administration tasks (installation, configuration); Enforce configuration over time (configuring once is good, ensuring that configuration is valid…
-
Linux Malware Detect rfxn.com
A malware scanner for Linux designed around the threats faced in shared hosted environments.
-
Usable Security Course pt.coursera.org
Usable Security course at coursera. Quite good for those looking for how security and usability intersects.
-
Project Honey Pot projecthoneypot.org
Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to…
-
Portswigger portswigger.net
PortSwigger offers tools for web application security, testing & scanning. Choose from a wide range of security tools & identify the very latest vulnerabilities.
-
PhishTank phishtank.com
PhishTank is a collaborative clearing house for data and information about phishing on the Internet. Also, PhishTank provides an open API for developers and researchers to integrate anti-phishing data into their applications at no charge.
-
OWASP Testing Checklist v4 owasp.org
List of some controls to test during a web vulnerability assessment. Markdown version may be found here.
-
OSSEC ossec.github.io
Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems…
-
OpenVAS NVT Feed openvas.org
The public feed of Network Vulnerability Tests (NVTs). It contains more than 35,000 NVTs (as of April 2014), growing on a daily basis. This feed is configured as the default for OpenVAS.
- next page of items loading…
