Security
287 items from sbilly/awesome-security ★14,971
-
99designs/aws-vault :fire::fire::fire::fire::fire: github.com
Store AWS credentials in the OSX Keychain or an encrypted file
-
OWASP NodeGoat github.com
OWASP - A Node.js web application that demonstrates and provides ways to address common security vulnerabilities.
-
-
Deepfence PacketStreamer github.com
High-performance remote packet capture and collection tool, distributed tcpdump for cloud native environments.
-
stenographer github.com
Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets.
-
Moloch github.com
Moloch is an open source, large scale IPv4 packet capturing (PCAP), indexing and database system. A simple web interface is provided for PCAP browsing, searching, and exporting. APIs are exposed that allow PCAP data and JSON-formatted session data to be downloaded directly…
-
tcpflow github.com
Captures TCP connections flows in a way that is convenient for protocol analysis and debugging.
-
-
Matano github.com
Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.
-
tfsec github.com
Terraform static analysis tool that prevents potential security issues by checking cloud misconfigurations at build time and directly integrates with the HCL parser for better results. Checks for violations of AWS, Azure and GCP security best practice recommendations.
-
Dshell github.com
Dshell is a network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures.
-
Awesome Personal Security github.com
A curated list of digital security and privacy tips, with links to further resources.
-
frida github.com
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
-
wazuh github.com
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of monitoring file system changes, system calls and inventory changes.
-
Amass github.com
Amass performs DNS subdomain enumeration by scraping the largest number of disparate data sources, recursive brute forcing, crawling of web archives, permuting and altering names, reverse DNS sweeping and other techniques.
-
CrowdSec github.com
CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on Fail2Ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors…
-
-
Teller github.com
a secrets management tool for devops and developers - manage secrets across multiple vaults and keystores from a single place.
-
OpenRASP github.com
An open source RASP solution actively maintained by Baidu Inc. With context-aware detection algorithm the project achieved nearly no false positives. And less than 3% performance reduction is observed under heavy server load.
-
-
pompelmi github.com
Node.js file-upload malware scanner with MIME sniffing, ZIP-bomb protection and optional YARA rules.
-
Bearer github.com
Open-Source static code analysis tool to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). Highly configurable and easily extensible, built for security and engineering teams.
-
cicd-goat github.com
Cider Security - A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
-
ir-rescue github.com
ir-rescue is a Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
-
-
-
-
lyft/confidant :fire::fire::fire::fire: github.com
Stores secrets in AWS DynamoDB, encrypted at rest and integrates with IAM
-
Keyscope github.com
Keyscope is an extensible key and secret validation for checking active secrets against multiple SaaS vendors built in Rust
-
-
-
-
Infection Monkey github.com
A semi automatic pen testing tool for mapping/pen-testing networks. Simulates a human attacker.
-
Recon-ng github.com
Recon-ng is a full-featured Web Reconnaissance framework written in Python. Recon-ng has a look and feel similar to the Metasploit Framework.
-
PTF github.com
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
-
-
google-authenticator github.com
The Google Authenticator project includes implementations of one-time passcode generators for several mobile platforms, as well as a pluggable authentication module (PAM). One-time passcodes are generated using open standards developed by the Initiative for Open Authentication…
-
NAXSI github.com
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX, NAXSI means Nginx Anti Xss & Sql Injection.
-
bountyyfi/lonkero github.com
Enterprise-grade web vulnerability scanner with 60+ attack modules for penetration testing and security assessments
-
Legion github.com
Open source semi-automated discovery and reconnaissance network penetration testing framework.
-
Axiom github.com
Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments, build and deploy repeatable infrastructure focussed on offensive and defensive security.
-
shellfirm github.com
It is a handy utility to help avoid running dangerous commands with an extra approval step. You will immediately get a small prompt challenge that will double verify your action when risky patterns are detected.
-
Network-segmentation-cheat-sheet github.com
This project was created to publish the best practices for segmentation of the corporate network of any company. In general, the schemes in this project are suitable for any company.
-
-
VAST github.com
Open source security data pipeline engine for structured event data, supporting high-volume telemetry ingestion, compaction, and retrieval; purpose-built for security content execution, guided threat hunting, and large-scale investigation.
-
-
-
-
Selefra github.com
An open-source policy-as-code software that provides analytics for multi-cloud and SaaS.
-
is-website-vulnerable github.com
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.
- next page of items loading…
