Security
5,347 items in 29 lists
-
OSSIM alienvault.com
OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.
-
XSS game xss-game.appspot.com
A game about tricking people into running code in their browsers.
-
ImageMagick imagemagick.org
Tool for manipulating images.
-
tl;dr sec tldrsec.com
-
Shift Security Left shift-security-left.curated.co
Cossack Labs - A free biweekly newsletter for security-aware developers covering application security, secure architecture, DevSecOps, cryptography, incidents, etc. that can be useful for builders and (to a lesser extent) for breakers.
-
Audacity sourceforge.net
open source, cross-platform software for recording and editing sounds.
-
Microsoft Research microsoft.com
National Security in the Age of AI and Quantum (2026) - Analyzes the intersection of artificial intelligence and quantum computing as critical drivers of national security and economic stability in the modern digital landscape. Findings indicate that a single week of cyber…
-
Security Data Science Papers covert.io
-
GitHub Archive gharchive.org
GitHub's public timeline since 2011, updated every hour.
-
terraform-compliance terraform-compliance.com
A lightweight, compliance- and security focused, BDD test framework against Terraform.
-
SonarQube for IDE sonarlint.org
SonarQube for IDE (formerly SonarLint) is a free IDE extension available for IntelliJ, VS Code, Visual Studio, and Eclipse, to find and fix coding issues in real-time, flagging issues as you code, just like a spell-checker. More than a linter, it also delivers rich contextual…
-
Semgrep semgrep.dev
A fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Its rules look like the code you already write; no abstract syntax trees or regex wrestling. Supports 17+ languages.
-
RIPS ripstech.com
copyright: — A static source code analyser for vulnerabilities in PHP scripts.
-
JEB Decompiler pnfsoftware.com
copyright: — Decompile and debug binary code. Break down and analyze document files. Android Dalvik, MIPS, ARM, Intel x86, Java, WebAssembly & Ethereum Decompilers.
-
Oversecured oversecured.com
copyright: — Enterprise vulnerability scanner for Android and iOS apps. It allows app owners and developers to secure each new version of a mobile app by integrating Oversecured into the development process.
-
OSV-Scanner osv.dev
Vulnerability scanner written in Go which uses the data provided by OSV.dev. Developed by Google to scan dependencies across multiple languages and package managers for known vulnerabilities. Supports container scanning, license scanning, and guided remediation. Works with…
-
checkov checkov.io
Static analysis tool for Terraform files (tf>=v0.12), preventing cloud misconfigs at build time.
-
AndroZoo androzoo.uni.lu
Collection of Android Applications.
-
Real World Cryptography manning.com
This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications.
-
CyberChef gchq.github.io
Web app for analysing and decoding data.
-
Applied Crypto Hardening bettercrypto.org
-
Hidden OAuth attack vectors portswigger.net
How to identify and exploit some of the key vulnerabilities found in OAuth 2.0 authentication mechanisms.
-
GDPR Tracker gdpr.eu
Europe's reference site.
-
GDPR Enforcement Tracker enforcementtracker.com
List of GDPR fines and penalties.
-
OAuth 2.0 Security Best Current Practice datatracker.ietf.org
“Updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application”.
-
Lynis is an open source security auditing tool including Docker auditing cisofy.com
an open source security auditing tool for Linux/Unix.
-
Docker Security - Quick Reference binarymist.io
A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques.
-
Onelogin onelogin.com
Authentication focussed on company internal applications.
-
Okta okta.com
Authentication and Authorization solution with support for Angular, React and VueJS.
-
Locust locust.io
An open-source load testing tool. Define user behaviour with Python code, and swarm your system with millions of simultaneous users.
-
Javadecompilers.com javadecompilers.com
Online Java decompiler that supports various decompilers.
-
American fuzzy lop lcamtuf.coredump.cx
a.k.a. afl-fuzz - Crazy fuzzing tool that automatically discovers bugs given time and minimal example input. [Apache2]
-
Kaitai Struct kaitai.io
A declarative language to describe various binary data structures and a compiler to generate C++ parser code. [GPLv3+][MIT][Apache2]
-
GDB gnu.org
GNU Debugger.
-
WireGuard wireguard.com
Fast, modern, and secure VPN tunnel.
-
Process Hacker processhacker.sourceforge.net
Comprehensive system monitoring and management tool.
-
Key Management Service (KMS) aws.amazon.com
Amazon AWS - Create and manage cryptographic keys in AWS.
-
tinc tinc-vpn.org
Secure mesh VPN software.
-
LuLu objective-see.com
LuLu is the free macOS firewall that aims to block unauthorized (outgoing) network traffic.
-
Dylib Hijack Scanner objective-see.com
Utility for scanning apps vulnerable to dylib hijacking.
-
BlockBlock objective-see.com
Me: "Please alert me whenever anything is persistently installed." BlockBlock: "You got it"
-
BlackArch Linux blackarch.org
(Security/Forensics) - An Arch Linux-based distribution designed for penetration testers and security researchers.
-
Kata Containers katacontainers.io
Kata Containers is a new open source project building extremely lightweight virtual machines that seamlessly plug into the containers ecosystem.
-
mongodb2hashcat github.com
Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256).
-
Experimental Suricata Training Environment github.com
Suricata Training Environment based on Docker(-Compose).
-
maskuni github.com
A standalone fast word generator in the spirit of hashcat's mask generator with unicode support.
-
PyPeid github.com
Yet another implementation of PEiD with yara-python.
-
CorbFuzz github.com
(2021) - A browser security policy testing framework that synthesizes web application responses to test cross-origin response blocking implementations.
-
ZeroTrust github.com
-
Drifuzz github.com
(2022) - A hardware-free device driver fuzzer that combines concolic execution with high-quality initial seed generation.
- next page of items loading…
