Security
287 items from sbilly/awesome-security ★14,971
-
OpenVAS openvas.org
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
-
OpenFPC openfpc.org
OpenFPC is a set of tools that combine to provide a lightweight full-packet network traffic recorder & buffering system. It's design goal is to allow non-expert users to deploy a distributed network traffic recorder on COTS hardware while integrating into existing alert and log…
-
PF_RING ZC (Zero Copy) ntop.org
PF_RING ZC (Zero Copy) is a flexible packet processing framework that allows you to achieve 1/10 Gbit line rate packet processing (both RX and TX) at any packet size. It implements zero copy operations including patterns for inter-process and inter-VM (KVM) communications.
-
Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities nodejs-security.com
Master secure coding in Node.js with real-world vulnerable dependencies and experience firsthand secure coding techniques against Path Traversal vulnerabilities.
-
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities nodejs-security.com
Learn secure coding conventions in Node.js by executing command injection attacks on real-world npm packages and analyzing vulnerable code.
-
ngrep ngrep.sourceforge.net
ngrep strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes IPv4/6, TCP…
-
ModSecurity modsecurity.org
ModSecurity is a toolkit for real-time web application monitoring, logging, and access control.
-
Mobile Security Wiki mobilesecuritywiki.com
A collection of mobile security resources.
-
mig mig.mozilla.org
MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security.
-
Tor Bulk Exit List metrics.torproject.org
CollecTor, your friendly data-collecting service in the Tor network. CollecTor fetches data from various nodes and services in the public Tor network and makes it available to the world. If you're doing research on the Tor network, or if you're developing an application that…
-
Understanding API Security manning.com
Free eBook sampler that gives some context for how API security works in the real world by showing how APIs are put together and how the OAuth protocol can be used to protect them.
-
The Art of Network Penetration Testing manning.com
Book that is a hands-on guide to running your own penetration test on an enterprise network. (early access, published continuously, final release December 2020)
-
Spring Security in Action, Second Edition manning.com
A book about designing and developing Spring applications that are secure right from the start.
-
Spring Boot in Practice manning.com
Book that is a practical guide which presents dozens of relevant scenarios in a convenient problem-solution-discussion format.. (early access, published continuously, final release fall 2021)
-
Self-Sovereign Identity manning.com
A book about how SSI empowers us to receive digitally-signed credentials, store them in private wallets, and securely prove our online identities. (early access, published continuously, final release fall 2021)
-
Securing DevOps manning.com
A book on Security techniques for DevOps that reviews state of the art practices used in securing web applications and their infrastructure.
-
Secret Key Cryptography manning.com
A book about cryptographic techniques and Secret Key methods. (early access, published continuously, final release Summer 2022)
-
OAuth 2 in Action manning.com
Book that teaches you practical use and deployment of OAuth 2 from the perspectives of a client, an authorization server, and a resource server.
-
Making Sense of Cyber Security manning.com
A jargon-free, practical guide to the key concepts, terminology, and technologies of cybersecurity perfect for anyone planning or implementing a security strategy. (early access, published continuously, final release early 2022)
-
Full Stack Python Security manning.com
A comprehensive look at cybersecurity for Python developers
-
Edge Computing Technology and Applications manning.com
A book about the business and technical foundation you need to create your edge computing strategy.
-
Data Privacy manning.com
A book that teaches you to implement technical privacy solutions and tools at scale. (early access, published continuously, final release January 2022)
-
Cyber Threat Hunting manning.com
Practical guide to cyber threat hunting.
-
Cyber Security Career Guide manning.com
Kickstart a career in cyber security by learning how to adapt your existing technical and non-technical skills. (early access, published continuously, final release Summer 2022)
-
Azure Security manning.com
A practical guide to the native security services of Microsoft Azure.
-
AWS Security manning.com
This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response.
-
API Security in Action manning.com
Book covering API security including secure development, token-based authentication, JSON Web Tokens, OAuth 2, and Macaroons. (early access, published continuously, final release summer 2020)
-
DNS-BH malwaredomains.com
The DNS-BH project creates and maintains a listing of domains that are known to be used to propagate malware and spyware. This project creates the Bind and Windows zone files required to serve fake replies to localhost for any requests to these, thus preventing many spyware…
-
leakedin.com leakedin.com
The primary purpose of leakedin.com is to make visitors aware about the risks of loosing data. This blog just compiles samples of data lost or disclosed on sites like pastebin.com.
-
Kojoney kojoney.sourceforge.net
Kojoney is a low level interaction honeypot that emulates an SSH server. The daemon is written in Python using the Twisted Conch libraries.
-
justniffer justniffer.sourceforge.net
Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic.
-
netmap info.iet.unipi.it
netmap is a framework for high speed packet I/O. Together with its companion VALE software switch, it is implemented as a single kernel module and available for FreeBSD, Linux and now also Windows.
-
docker-metasploit hub.docker.com
-
official Kali Linux hub.docker.com
-
OWASP WrongSecrets hub.docker.com
-
Cyware Threat Response Docker hub.docker.com
-
OWASP Juice Shop hub.docker.com
-
Holistic Info-Sec for Web Developers holisticinfosecforwebdevelopers.com
Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty…
-
Hardening Windows 10 hardenwindows10forsecurity.com
Guide for hardening Windows 10
-
Glastopf glastopf.org
Glastopf is a Honeypot which emulates thousands of vulnerabilities to gather data from attacks targeting web applications. The principle behind it is very simple: Reply the correct response to the attacker exploiting the web application.
-
Spam Scanner github.com
Anti-Spam Scanning Service and Anti-Spam API by @niftylettuce.
-
Stealth fbb-git.gitlab.io
File integrity checker that leaves virtually no sediment. Controller runs from another machine, which makes it hard for an attacker to know that the file system is being checked at defined pseudo random intervals over SSH. Highly recommended for small to medium deployments.
-
Fail2Ban fail2ban.org
Scans log files and takes action on IPs that show malicious behavior.
-
PACKET_MMAP/TPACKET/AF_PACKET elixir.bootlin.com
It's fine to use PACKET_MMAP to improve the performance of the capture and transmission process in Linux.
-
httpry dumpsterventures.com
httpry is a specialized packet sniffer designed for displaying and logging HTTP traffic. It is not intended to perform analysis itself, but to capture, parse, and log the traffic for later analysis. It can be run in real-time displaying the traffic as it is parsed, or as a…
-
T-Pot Honeypot Distro dtag-dev-sec.github.io
T-Pot is based on the network installer of Ubuntu Server 16/17.x LTS. The honeypot daemons as well as other support components being used have been containerized using docker. This allows us to run multiple honeypot daemons on the same network interface while maintaining a…
-
Internet Storm Center dshield.org
The ISC was created in 2001 following the successful detection, analysis, and widespread warning of the Li0n worm. Today, the ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service…
-
DrKeithJones.com drkeithjones.com
A blog on cyber security and network security monitoring.
-
Emerging Threats - Open Source doc.emergingthreats.net
Emerging Threats began 10 years ago as an open source community for collecting Suricata and SNORT® rules, firewall rules, and other IDS rulesets. The open source community still plays an active role in Internet security, with more than 200,000 active users downloading the…
-
Denyhosts denyhosts.sourceforge.net
Thwart SSH dictionary based attacks and brute force attacks.
- next page of items loading…
