Security
5,347 items in 29 lists
-
SSHGuard sshguard.net
A software to protect services in addition to SSH, written in C
-
Sqreen sqreen.io
Sqreen is a Runtime Application Self-Protection (RASP) solution for software teams. An in-app agent instruments and monitors the app. Suspicious user activities are reported and attacks are blocked at runtime without code modification or traffic redirection.
-
sqlmap sqlmap.org
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range…
-
SBL / XBL / PBL / DBL / DROP / ROKSO spamhaus.org
The Spamhaus Project is an international nonprofit organization whose mission is to track the Internet's spam operations and sources, to provide dependable realtime anti-spam protection for Internet networks, to work with Law Enforcement Agencies to identify and pursue spam and…
-
SpamAssassin spamassassin.apache.org
A powerful and popular email spam filter employing a variety of detection technique.
-
Bifrozt sourceforge.net
Bifrozt is a NAT device with a DHCP server that is usually deployed with one NIC connected directly to the Internet and one NIC connected to the internal network. What differentiates Bifrozt from other standard NAT devices is its ability to work as a transparent SSHv2 proxy…
-
The Security Engineer Handbook securityhandbook.io
A short read that discusses the dos and dont's of working in a security team, and the many tricks and tips that can help you in your day-to-day as a security engineer.
-
Scammer-List scammerlist.now.sh
A free open source AI based Scam and Spam Finder with a free API
-
sagan sagan.quadrantsec.com
Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc).
-
Rudder rudder-project.org
Rudder is an easy to use, web-driven, role-based solution for IT Infrastructure Automation & Compliance. Automate common system administration tasks (installation, configuration); Enforce configuration over time (configuring once is good, ensuring that configuration is valid…
-
Linux Malware Detect rfxn.com
A malware scanner for Linux designed around the threats faced in shared hosted environments.
-
Usable Security Course pt.coursera.org
Usable Security course at coursera. Quite good for those looking for how security and usability intersects.
-
Project Honey Pot projecthoneypot.org
Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to…
-
Portswigger portswigger.net
PortSwigger offers tools for web application security, testing & scanning. Choose from a wide range of security tools & identify the very latest vulnerabilities.
-
PhishTank phishtank.com
PhishTank is a collaborative clearing house for data and information about phishing on the Internet. Also, PhishTank provides an open API for developers and researchers to integrate anti-phishing data into their applications at no charge.
-
OWASP Testing Checklist v4 owasp.org
List of some controls to test during a web vulnerability assessment. Markdown version may be found here.
-
OSSEC ossec.github.io
Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems…
-
OpenVAS NVT Feed openvas.org
The public feed of Network Vulnerability Tests (NVTs). It contains more than 35,000 NVTs (as of April 2014), growing on a daily basis. This feed is configured as the default for OpenVAS.
-
OpenVAS openvas.org
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
-
OpenFPC openfpc.org
OpenFPC is a set of tools that combine to provide a lightweight full-packet network traffic recorder & buffering system. It's design goal is to allow non-expert users to deploy a distributed network traffic recorder on COTS hardware while integrating into existing alert and log…
-
PF_RING ZC (Zero Copy) ntop.org
PF_RING ZC (Zero Copy) is a flexible packet processing framework that allows you to achieve 1/10 Gbit line rate packet processing (both RX and TX) at any packet size. It implements zero copy operations including patterns for inter-process and inter-VM (KVM) communications.
-
Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities nodejs-security.com
Master secure coding in Node.js with real-world vulnerable dependencies and experience firsthand secure coding techniques against Path Traversal vulnerabilities.
-
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities nodejs-security.com
Learn secure coding conventions in Node.js by executing command injection attacks on real-world npm packages and analyzing vulnerable code.
-
ngrep ngrep.sourceforge.net
ngrep strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes IPv4/6, TCP…
-
ModSecurity modsecurity.org
ModSecurity is a toolkit for real-time web application monitoring, logging, and access control.
-
Mobile Security Wiki mobilesecuritywiki.com
A collection of mobile security resources.
-
mig mig.mozilla.org
MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security.
-
Tor Bulk Exit List metrics.torproject.org
CollecTor, your friendly data-collecting service in the Tor network. CollecTor fetches data from various nodes and services in the public Tor network and makes it available to the world. If you're doing research on the Tor network, or if you're developing an application that…
-
Understanding API Security manning.com
Free eBook sampler that gives some context for how API security works in the real world by showing how APIs are put together and how the OAuth protocol can be used to protect them.
-
The Art of Network Penetration Testing manning.com
Book that is a hands-on guide to running your own penetration test on an enterprise network. (early access, published continuously, final release December 2020)
-
Spring Security in Action, Second Edition manning.com
A book about designing and developing Spring applications that are secure right from the start.
-
Spring Boot in Practice manning.com
Book that is a practical guide which presents dozens of relevant scenarios in a convenient problem-solution-discussion format.. (early access, published continuously, final release fall 2021)
-
Self-Sovereign Identity manning.com
A book about how SSI empowers us to receive digitally-signed credentials, store them in private wallets, and securely prove our online identities. (early access, published continuously, final release fall 2021)
-
Securing DevOps manning.com
A book on Security techniques for DevOps that reviews state of the art practices used in securing web applications and their infrastructure.
-
Secret Key Cryptography manning.com
A book about cryptographic techniques and Secret Key methods. (early access, published continuously, final release Summer 2022)
-
OAuth 2 in Action manning.com
Book that teaches you practical use and deployment of OAuth 2 from the perspectives of a client, an authorization server, and a resource server.
-
Making Sense of Cyber Security manning.com
A jargon-free, practical guide to the key concepts, terminology, and technologies of cybersecurity perfect for anyone planning or implementing a security strategy. (early access, published continuously, final release early 2022)
-
Full Stack Python Security manning.com
A comprehensive look at cybersecurity for Python developers
-
Edge Computing Technology and Applications manning.com
A book about the business and technical foundation you need to create your edge computing strategy.
-
Data Privacy manning.com
A book that teaches you to implement technical privacy solutions and tools at scale. (early access, published continuously, final release January 2022)
-
Cyber Threat Hunting manning.com
Practical guide to cyber threat hunting.
-
Cyber Security Career Guide manning.com
Kickstart a career in cyber security by learning how to adapt your existing technical and non-technical skills. (early access, published continuously, final release Summer 2022)
-
Azure Security manning.com
A practical guide to the native security services of Microsoft Azure.
-
AWS Security manning.com
This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response.
-
API Security in Action manning.com
Book covering API security including secure development, token-based authentication, JSON Web Tokens, OAuth 2, and Macaroons. (early access, published continuously, final release summer 2020)
-
DNS-BH malwaredomains.com
The DNS-BH project creates and maintains a listing of domains that are known to be used to propagate malware and spyware. This project creates the Bind and Windows zone files required to serve fake replies to localhost for any requests to these, thus preventing many spyware…
-
leakedin.com leakedin.com
The primary purpose of leakedin.com is to make visitors aware about the risks of loosing data. This blog just compiles samples of data lost or disclosed on sites like pastebin.com.
-
Kojoney kojoney.sourceforge.net
Kojoney is a low level interaction honeypot that emulates an SSH server. The daemon is written in Python using the Twisted Conch libraries.
-
justniffer justniffer.sourceforge.net
Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic.
-
netmap info.iet.unipi.it
netmap is a framework for high speed packet I/O. Together with its companion VALE software switch, it is implemented as a single kernel module and available for FreeBSD, Linux and now also Windows.
- next page of items loading…
