security

An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

X-SpringBoot是一个轻量级的Java快速开发平台，基于springboot3和jdk21，使用虚拟线程，可配置的SaaS功能具备RBAC功能、自动代码生成、多种存储系统，多种短信平...

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It i...

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

A tool to dump a git repository from a website

🚀 Caido releases, wiki and roadmap

Java web common vulnerabilities and security code which is base on springboot and spring security

Automated Security Testing For REST API's

HardeningKitty and Windows Hardening Settings

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppA...

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository s...

FISCO BCOS（发音为/ˈfɪskl bi:ˈkɒz/）是一个稳定、高效、安全的许可区块链平台，已被广泛应用于现实的行业应用。截至目前，已拥有5000多家企事业单位，400多个...

A fork of AFL for fuzzing Windows binaries

Phishing Campaign Toolkit

Automating situational awareness for cloud penetration tests.

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

You don't have the time to watch all the WWDC session videos yourself? No problem me and many contributors extracted the gist for you 🥳

Captcha for Laravel 5+

Security Scanner for Agent Skills

nodejsscan is a static security code scanner for Node.js applications.

JWT brute force cracker written in C

Security sensor for realtime threat detection and protection

Semi-automatic OSINT framework and package manager

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata al...

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+...

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

A p2p, secure file storage, social network and application protocol

红队作战中比较常遇到的一些重点系统漏洞整理。

Creepy device and browser fingerprinting

Copy/paste anything over the network.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Powerful framework for rogue access point attack.

🛡️ Awesome Cloud Security Resources ⚔️

A collection of smart contract vulnerabilities along with prevention methods

兜哥出品 <一本开源的NLP入门书籍>

Provides a tight integration of the Security component into the Symfony full-stack framework

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

DockFlare: Automate Cloudflare Tunnels with Docker Labels

A very small, very simple, yet very secure encryption tool.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

A curated list of awesome embedded and IoT security resources.

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

U2F USB token optimized for physical security, affordability, and style