Most popular security repositories and open source projects

cicd-goat cider-security-research Python

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

2.2k 396 2.2k

nothing-private gautamkrishnar JavaScript

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingpr...

2.2k 157 2.2k

pyt python-security Python

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

2.2k 249 2.2k

cloudsplaining salesforce JavaScript

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

2.2k 217 2.2k

Reconnoitre codingo Python

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writ...

2.2k 459 2.2k

goHackTools dreddsa5dies Go

Hacker tools on Go (Golang)

2.2k 375 2.2k

landrun Zouuup Go

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

2.2k 50 2.2k

awesome-iam kdeldycke

👤 Identity and Access Management knowledge for cloud platforms

2.2k 177 2.2k

tirith sheeki03 Rust

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and...

2.2k 71 2.2k

MozDef mozilla Python

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

2.2k 325 2.2k

gokart praetorian-inc Go

A static analysis tool for securing Go code

2.2k 108 2.2k

oauth2 ruby-oauth Ruby

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

2.2k 624 2.2k

Venom Dliv3 Go

Venom - A Multi-hop Proxy for Penetration Testers

2.2k 361 2.2k

ghostunnel ghostunnel Go

A simple SSL/TLS proxy with mutual authentication for securing non-TLS services.

2.1k 284 2.1k

dismap zhzyker Go

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

2.1k 272 2.1k

policy_sentry salesforce Python

IAM Least Privilege Policy Generator

2.1k 152 2.1k

InternalAllTheThings swisskyrepo HTML

Active Directory and Internal Pentest Cheatsheets

2.1k 397 2.1k

caddy-security greenpau Go

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAut...

2.1k 99 2.1k

the-bastion ovh Perl

Authentication, authorization, traceability and auditability for SSH accesses.

2.1k 128 2.1k

OWASP-Web-Checklist 0xRadi

OWASP Web Application Security Testing Checklist

2.1k 409 2.1k

agent-scan snyk Python

Security scanner for AI agents, MCP servers and agent skills.

2.1k 200 2.1k

IPBan DigitalRuby C#

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your...

2.1k 394 2.1k

aws-well-architected-labs awslabs Python

Hands on labs and code to help you learn, measure, and build using architectural best practices.

2.1k 1.1k 2.1k

Certified-Kubernetes-Security-Specialist walidshaari AGS Script

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provi...

2.1k 557 2.1k

nfcgate nfcgate Java

An NFC research toolkit application for Android

2.1k 254 2.1k

snallygaster hannob Python

Tool to scan for secret files on HTTP servers

2.1k 229 2.1k

DevSecOps hahwul Just

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

2.1k 423 2.1k

collection-document tom0li

Collection of quality safety articles. Awesome articles.

2.1k 508 2.1k

spring-boot-leaning ityouknow Java

Spring Boot 2.X 最全课程代码

2.1k 923 2.1k

Note scalad Java

常规Java工具，算法，加密，数据库，面试题，源代码分析，解决方案

2.1k 828 2.1k

runtime kata-containers Go

Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers).

2.1k 367 2.1k

alarmo nielsfaber Python

Easy to use alarm system integration for Home Assistant

2.1k 149 2.1k

KubeArmor kubearmor Go

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppA...

2.1k 461 2.1k

Awesome-Federated-Machine-Learning innovation-cat

Everything about federated learning, including research papers, books, codes, tutorials, videos and beyond

2.1k 288 2.1k

Hikari HikariObfuscator

LLVM Obfuscator

2.1k 561 2.1k

fixinventory someengineering Python

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

2.1k 136 2.1k

DevDocs cyberagiinc TypeScript

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, W...

2.1k 186 2.1k