security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Repositories (1491)
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dyn...
PacBot (Policy as Code Bot)
Linting tool for CloudFormation templates
Advanced Honeypot framework.
Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.
secator - the pentester's swiss knife
Open-source GitHub repository abuse detection and response system.
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 20...
Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain...
K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件...
a collection about Windows 11
The fastest dork scanner written in Go.
RSA public/private key encryption in Swift
A Tox-based instant messaging and video chat client.
Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptogra...
PowerShell framework to assess Azure security
😎 🐣 A starter boilerplate for a universal web app with the best development experience and a focus on performance and best practices.
This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
WordPress static site generator for security, performance and cost benefits
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes
Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting
log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web s...
Testing, simplified. || An inclusive, accessibility-first GUI for generating clean, semantic Javascript tests in only a few clicks of a button.
Some public notes
Plugin for sudo that requires another human to approve and monitor privileged sudo sessions
spring-boot 项目实践总结
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
A curated list of awesome tips and tricks, resources, videos and articles in .NET, Software Architecture, Cloud-Native, Data and AI.
Discover Your Attack Surface!
One-command AmneziaWG 2.0 / 3.x installer for a self-hosted VPN server on Ubuntu and Debian: DPI bypass, traffic obfuscation, split tunneling, auto-ha...
Coverage-guided, in-process fuzzing for the JVM
✨ Awesome - A curated list of amazing Homomorphic Encryption libraries, software and resources
Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating sy...
Collection of npm package manager Security Best Practices
🍯 Unobtrusive and flexible spam protection for Rails apps
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
Decentralized VPN
a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to mon...
Authentication for PHP. Simple, lightweight and secure.
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
Transparent proxy through Tor for Kali Linux OS
A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks...
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow