Security
5,347 items in 29 lists
-
mitmproxy github.com
An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface
-
Trivy github.com
Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).
-
radare2 github.com
A portable reversing framework.
-
UglifyJS2 github.com
JavaScript minifier.
-
jadx github.com
Command line and GUI tools for produce Java source code from Android Dex and Apk files.
-
DBeaver github.com
Universal database tool and SQL client. Languages: Java (1 more screenshots available in the repository)
-
jnv/list github.com
List of (awesome) lists curated on GitHub.
-
sqlmap github.com
Automatic SQL injection and database takeover tool. pip install sqlmap
-
bridgecrewio/checkov :fire::fire::fire::fire::fire: github.com
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.
-
blackbox github.com
Safely store secrets in a VCS repo using GPG
-
sops github.com
An editor of encrypted files that supports YAML, JSON and BINARY formats and encrypts with AWS KMS and PGP.
-
Deepfence Threat Mapper github.com
Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
-
official OWASP ZAP github.com
OWASP - An open-source web application vulnerability scanner, including an API for CI/CD integration.
-
KICS github.com
An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policies.
-
Metasploit github.com
A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
-
angr github.com
Binary code analysis tool that also supports symbolic execution.
-
themis github.com
Multilanguage framework for making typical encryption schemes easy to use: data at rest, authenticated data exchange, transport protection, authentication, and so on.
-
Volatility github.com
Python based memory extraction and analysis framework.
-
Brakeman github.com
A gem to scan code against security vulnerabilities. :red_circle:
-
Gitleaks github.com
A SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos.
-
acra github.com
Network encryption proxy to protect database-based applications from data leaks: strong selective encryption, SQL injections prevention, intrusion detection system.
-
stronghold github.com
Easily configure MacOS security settings from the terminal.
-
gvisor github.com
gVisor is a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host kernel. The runsc…
-
Grype github.com
A vulnerability scanner for container images, filesystems and SBOMs.
-
scapy github.com
A python library to send, receive, edit raw packets. Supports CAN and automotive protocols: see the automotive doc
-
Hadolint github.com
A Dockerfile linter that checks for best practices, common mistakes, and is also able to lint any bash written in RUN instructions;.
-
openpilot github.com
openpilot is an open source driving agent that performs the functions of Adaptive Cruise Control (ACC) and Lane Keeping Assist System (LKAS) for Hondas and Acuras.
-
Ghidra github.com
Software Reverse Engineering Framework.
-
PayloadsAllTheThings github.com
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-
BunkerWeb github.com
Open-source and next-gen Web Application Firewall (WAF).
- next page of items loading…
