security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Repositories (1486)
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 20...
RSA public/private key encryption in Swift
The fastest dork scanner written in Go.
K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件...
a collection about Windows 11
Open-source GitHub repository abuse detection and response system.
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.
😎 🐣 A starter boilerplate for a universal web app with the best development experience and a focus on performance and best practices.
WordPress static site generator for security, performance and cost benefits
This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
PowerShell framework to assess Azure security
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptogra...
Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes
:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:
Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
Testing, simplified. || An inclusive, accessibility-first GUI for generating clean, semantic Javascript tests in only a few clicks of a button.
log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web s...
Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting
Some public notes
75k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
Plugin for sudo that requires another human to approve and monitor privileged sudo sessions
spring-boot 项目实践总结
A curated list of awesome tips and tricks, resources, videos and articles in .net, software architecture, microservice and cloud-native.
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
Discover Your Attack Surface!
✨ Awesome - A curated list of amazing Homomorphic Encryption libraries, software and resources
Coverage-guided, in-process fuzzing for the JVM
Decentralized VPN
🍯 Unobtrusive and flexible spam protection for Rails apps
Collection of npm package manager Security Best Practices
a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to mon...
Authentication for PHP. Simple, lightweight and secure.
Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating sy...
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers acro...
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks...
Transparent proxy through Tor for Kali Linux OS
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and r...
A collection of practical security-focused guides and checklists for smart contract development
Custom & better AppArmor profile generator for Docker containers.
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
🔒 Enterprise-grade API gateway that helps you monitor and impose cost or rate limits per API key. Get fine-grained access control and monitoring per...
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
An IIS short filename enumeration tool
🔒 Anti DDOS | Bash Script Project 🔒
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a...