Security
5,347 items in 29 lists
-
terraform-compliance terraform-compliance.com
A lightweight, compliance- and security focused, BDD test framework against Terraform.
-
SonarQube for IDE sonarlint.org
SonarQube for IDE (formerly SonarLint) is a free IDE extension available for IntelliJ, VS Code, Visual Studio, and Eclipse, to find and fix coding issues in real-time, flagging issues as you code, just like a spell-checker. More than a linter, it also delivers rich contextual…
-
Semgrep semgrep.dev
A fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Its rules look like the code you already write; no abstract syntax trees or regex wrestling. Supports 17+ languages.
-
RIPS ripstech.com
copyright: — A static source code analyser for vulnerabilities in PHP scripts.
-
JEB Decompiler pnfsoftware.com
copyright: — Decompile and debug binary code. Break down and analyze document files. Android Dalvik, MIPS, ARM, Intel x86, Java, WebAssembly & Ethereum Decompilers.
-
Oversecured oversecured.com
copyright: — Enterprise vulnerability scanner for Android and iOS apps. It allows app owners and developers to secure each new version of a mobile app by integrating Oversecured into the development process.
-
OSV-Scanner osv.dev
Vulnerability scanner written in Go which uses the data provided by OSV.dev. Developed by Google to scan dependencies across multiple languages and package managers for known vulnerabilities. Supports container scanning, license scanning, and guided remediation. Works with…
-
checkov checkov.io
Static analysis tool for Terraform files (tf>=v0.12), preventing cloud misconfigs at build time.
-
AndroZoo androzoo.uni.lu
Collection of Android Applications.
-
Real World Cryptography manning.com
This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications.
-
CyberChef gchq.github.io
Web app for analysing and decoding data.
-
Applied Crypto Hardening bettercrypto.org
-
Hidden OAuth attack vectors portswigger.net
How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.
-
GDPR Tracker gdpr.eu
Europe's reference site.
-
GDPR Enforcement Tracker enforcementtracker.com
List of GDPR fines and penalties.
-
OAuth 2.0 Security Best Current Practice datatracker.ietf.org
“Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.
-
Lynis is an open source security auditing tool including Docker auditing cisofy.com
an open source security auditing tool for Linux/Unix.
-
Docker Security - Quick Reference binarymist.io
A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques.
-
Onelogin onelogin.com
Authentication focussed on company internal applications.
-
Okta okta.com
Authentication and Authorization solution with support for Angular, React and VueJS.
-
Locust locust.io
An open-source load testing tool. Define user behaviour with Python code, and swarm your system with millions of simultaneous users.
-
Javadecompilers.com javadecompilers.com
Online Java decompiler that supports various decompilers.
-
American fuzzy lop lcamtuf.coredump.cx
a.k.a. afl-fuzz - Crazy fuzzing tool that automatically discovers bugs given time and minimal example input. [Apache2]
-
Kaitai Struct kaitai.io
A declarative language to describe various binary data structures and a compiler to generate C++ parser code. [GPLv3+][MIT][Apache2]
-
GDB gnu.org
GNU Debugger.
-
WireGuard wireguard.com
Fast, modern, and secure VPN tunnel.
-
Process Hacker processhacker.sourceforge.net
Comprehensive system monitoring and management tool.
-
Key Management Service (KMS) aws.amazon.com
Amazon AWS - Create and manage cryptographic keys in AWS.
-
tinc tinc-vpn.org
Secure mesh VPN software.
-
LuLu objective-see.com
LuLu is the free macOS firewall that aims to block unauthorized (outgoing) network traffic.
-
Dylib Hijack Scanner objective-see.com
Utility for scanning apps vulnerable to dylib hijacking.
-
BlockBlock objective-see.com
Me: "Please alert me whenever anything is persistently installed." BlockBlock: "You got it"
-
BlackArch Linux blackarch.org
(Security/Forensics) - An Arch Linux-based distribution designed for penetration testers and security researchers.
-
Kata Containers katacontainers.io
Kata Containers is a new open source project building extremely lightweight virtual machines that seamlessly plug into the containers ecosystem.
-
WSO2 Identity Server wso2.com
Identity Server which provides modern identity and access management capabilities that can be easily built into organization's customer experience (CX) applications.
-
MiniOrange OAuth SSO wordpress.org
Wordpress OAuth and OpenID Connect plugin developed and actively maintained by MiniOrange.
-
Symfony Security symfony.com
PHP Security component with OpenID Connect support.
-
Mike Jones: Self-Issued self-issued.info
Mike Jones blog posts about OAuth 2.0 and OpenID Connect.
-
SecureAuth secureauth.com
Identity security platform that provides OpenID Connect Provider capabilities.
-
SailPoint sailpoint.com
Enterprise identity security platform that provides OpenID Connect Provider capabilities.
-
golang.org/x/oauth2 pkg.go.dev
Official Golang client implementation for OAuth 2.0 spec with OpenID Connect support.
-
PingFederate pingidentity.com
Federation server that provides secure single sign-on, API security and provisioning for enterprise customers, partners, and employees.
-
-
OpenID Shared Signals Framework Specification 1.0 openid.net
Shared Signals Framework (SSF) enables sharing of signals and events between cooperating peers that enables multiple applications such as Risk Incident Sharing and Coordination (RISC) and the Continuous Access Evaluation Profile (CAEP).
-
OpenID Provider Authentication Policy Extension 1.0 openid.net
Specifications about a mechanism by which a Relying Party can request that particular authentication policies like multi-factor authentication be applied by the OpenID Provider.
-
Financial-grade API Security Profile 1.0 - Part 2: Advanced openid.net
Advanced security profile of OAuth that is suitable to be used for protecting APIs with high inherent risk in the context of Financial-grade APIs.
-
Financial-grade API Security Profile 1.0 - Part 1: Baseline openid.net
Baseline security profile of OAuth that is suitable for protecting APIs with a moderate inherent risk in the context of Financial-grade APIs.
-
Financial-grade API: Client Initiated Backchannel Authentication Profile openid.net
Financial services profile specifications for Client Initiated Backchannel Authentication (aka CIBA).
-
OpenID Connect Federation 1.0 openid.net
Draft specifications for putting in place bilateral federations between to organizations.
-
OpenID Connect Session Management openid.net
Specifications about OpenID Connect session management.
- next page of items loading…
