Security
5,347 items in 29 lists
-
99designs/aws-vault :fire::fire::fire::fire::fire: github.com
Store AWS credentials in the OSX Keychain or an encrypted file
-
JS-Beautifier github.com
-
Bubblewrap github.com
Sandboxing tool forming a protective layer for your system.
-
OWASP NodeGoat github.com
OWASP - A Node.js web application that demonstrates and provides ways to address common security vulnerabilities.
-
FIR github.com
Fast Incident Response, a cybersecurity incident management platform.
-
Maltrail github.com
-
Tsunami Security Scanner github.com
A general purpose network security scanner with an extensible plugin system for detecting high severity RCE-like vulnerabilities with high confidence. Custom detectors for finding vulnerabilities (e.g. open APIs) can be added.
-
GEF github.com
GDB plugin.
-
Deepfence PacketStreamer github.com
High-performance remote packet capture and collection tool, distributed tcpdump for cloud native environments.
-
stenographer github.com
Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets.
-
Moloch github.com
Moloch is an open source, large scale IPv4 packet capturing (PCAP), indexing and database system. A simple web interface is provided for PCAP browsing, searching, and exporting. APIs are exposed that allow PCAP data and JSON-formatted session data to be downloaded directly…
-
tcpflow github.com
Captures TCP connections flows in a way that is convenient for protocol analysis and debugging.
-
Quark-Engine github.com
An Obfuscation-Neglect Android Malware Scoring System.
-
Matano github.com
Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.
-
Better Auth github.com
TypeScript Framework agnostic authentication library for SPAs and server-side applications.
-
tfsec github.com
Terraform static analysis tool that prevents potential security issues by checking cloud misconfigurations at build time and directly integrates with the HCL parser for better results. Checks for violations of AWS, Azure and GCP security best practice recommendations.
-
IPsec VPN Server Auto Setup Scripts github.com
-
zizmorcore/zizmor github.com
[zizmor] - Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.
-
cowrie github.com
SSH Honeypot (based on kippo).
-
Androguard github.com
Reverse engineer Android applications.
-
XORTool github.com
A tool to analyze multi-byte xor cipher.
-
ILSpy github.com
an open-source .NET assembly browser and decompiler
-
CAPA github.com
detects capabilities in executable files. You run it against a PE, ELF, .NET module, or shellcode file and it tells you what it thinks the program can do.
-
PEDA github.com
GDB plugin (only python2.7).
-
Radare2 github.com
Reverse engineering framework and command-line toolset.
-
Commix github.com
Automated All-in-One OS Command Injection and Exploitation Tool.
-
Socialite github.com
Laravel wrapper around OAuth 1 & OAuth 2 libraries with OpenID Connect support.
-
osquery github.com
-
innernet github.com
An overlay or private mesh network that uses Wireguard under the hood
-
Dshell github.com
Dshell is a network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures.
-
SpiderFoot github.com
-
authlib github.com
Python library in building OAuth and OpenID Connect servers and clients.
-
Awesome Personal Security github.com
A curated list of digital security and privacy tips, with links to further resources.
-
js-xss github.com
-
openiddict github.com
.NET Open Source OpenID Connect Provider implementation with ASP.NET Core 2.1 (and higher) applications support.
-
frida github.com
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
-
Mobile-Security-Framework MobSF github.com
Mobile Security Framework is an intelligent, all-in-one open-source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis, and web API testing.
-
mimikatz github.com
A little tool to play with Windows security
-
Ciphey github.com
Automated decryption tool using artificial intelligence & natural language processing.
-
Yara rules github.com
-
Password Manager Resources github.com
🆓 A collection of password rules, change URLs and quirks by sites.
-
Manalyze github.com
A static analyzer, which checks portable executables for malicious content.
-
Cutter github.com
Free and Open Source Reverse Engineering Platform powered by rizin.
-
detect-secrets github.com
An enterprise friendly way of detecting and preventing secrets in code. It does this by running periodic diff outputs against heuristically crafted regex statements, to identify whether any new secret has been committed. This way, it avoids the overhead of digging through all…
-
emanuele-em/proxelar github.com
A MITM Proxy 🦀! Toolkit for HTTP/1, HTTP/2, and WebSockets with SSL/TLS Capabilities
-
CSCI 4976 github.com
-
Fernflower github.com
Analytical Java decompiler by JetBrains.
-
Nebula github.com
-
uncompyle6 github.com
decompiler for the over 20 releases and 20 years of CPython.
-
Triton github.com
Dynamic Binary Analysis (DBA) framework.
- next page of items loading…
