Security
5,347 items in 29 lists
-
Darkmoon github.com
Open-source (GPLv3) autonomous AI penetration-testing CLI with 50 specialist agents and 140+ offensive tools over MCP for DAST-style web and API security assessment.
-
DevSkim github.com
Regex-based static analysis tool for Visual Studio, VS Code, and Sublime Text - C/C++, C#, PHP, ASP, Python, Ruby, Java, and others.
-
wazuh github.com
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of monitoring file system changes, system calls and inventory changes.
-
Raccoon github.com
A high performance offensive security tool for reconnaissance and vulnerability scanning.
-
jumpstarter github.com
A hardware-in-the-loop testing framework with automotive diagnostic drivers for UDS, DoIP, and CAN bus protocols.
-
HELK github.com
Threat Hunting platform.
-
Amass github.com
In-depth subdomain enumeration tool that performs scraping, recursive brute forcing, crawling of web archives, name altering and reverse DNS sweeping
-
Amass github.com
Amass performs DNS subdomain enumeration by scraping the largest number of disparate data sources, recursive brute forcing, crawling of web archives, permuting and altering names, reverse DNS sweeping and other techniques.
-
MVT (Mobile Verification Toolkit) github.com
a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices
-
XSStrike github.com
-
CrowdSec github.com
CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on Fail2Ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors…
-
oauth2-proxy github.com
Reverse proxy adding OpenID Connect and OAuth 2.0 based authentication in front of any application.
-
Prowler github.com
-
prowler github.com
-
Logto github.com
An Open-source solution designed for Customer Identity and Access Management (CIAM) and Workforce Identity Management with OpenID Connect based authentication.
-
SubFinder github.com
SubFinder is a subdomain discovery tool that discovers valid subdomains for any target using passive online sources.
-
Timesketch github.com
Collaborative forensic timeline analysis.
-
opensnitch github.com
OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
-
OWASP Juice Shop github.com
-
LogonTracer github.com
Tool to investigate malicious Windows logon by visualizing and analyzing Windows event log.
-
John The Jumbo github.com
Community enhanced version of John the Ripper.
-
Teller github.com
a secrets management tool for devops and developers - manage secrets across multiple vaults and keystores from a single place.
-
Photon github.com
-
Routersploit github.com
Framework dedicated to exploit embedded devices.
-
OSX Auditor github.com
Free Mac OS X computer forensics tool.
-
PowerSploit github.com
A PowerShell post exploitation framework
-
plasma github.com
-
Plasma github.com
An interactive disassembler for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax.
-
Z3 github.com
A theorem prover from Microsoft Research.
-
OpenRASP github.com
An open source RASP solution actively maintained by Baidu Inc. With context-aware detection algorithm the project achieved nearly no false positives. And less than 3% performance reduction is observed under heavy server load.
-
RESTler (⭐2.9k) github.com
A stateful REST API fuzzing tool that automatically discovers security and reliability bugs by intelligently inferring producer-consumer dependencies from OpenAPI specifications.
-
SocketCAN Utils github.com
Userspace utilites for SocketCAN on Linux.
-
logdissect github.com
CLI utility and Python API for analyzing log files and other data.
-
pompelmi github.com
Node.js file-upload malware scanner with MIME sniffing, ZIP-bomb protection and optional YARA rules.
-
Dependencies github.com
a FOSS replacement to Dependency Walker.
-
APTSimulator github.com
Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised.
-
Bearer github.com
Open-Source static code analysis tool to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). Highly configurable and easily extensible, built for security and engineering teams.
-
Detect It Easy(DiE) github.com
-
File Formats posters github.com
-
openalpr github.com
An open source Automatic License Plate Recognition library written in C++ with bindings in C#, Java, Node.js, Go, and Python.
-
AFLplusplus/LibAFL github.com
Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, etc.
-
Sigma github.com
-
Dex github.com
Provider that acts as a portal to other identity providers through "connectors." like LDAP, SAML, OIDC or established identity providers like GitHub, Google, and Active Directory.
-
Bunkerized-nginx github.com
-
beef github.com
-
Pwndbg github.com
A GDB plugin that provides a suite of utilities to hack around GDB easily.
-
webshell github.com
-
pac4j github.com
Framework-agnostic Java security engine with OpenID Federation support and adapters for Spring, Jakarta EE, Play, Vert.x and other web frameworks.
-
YARA github.com
-
wpscan github.com
- next page of items loading…
