Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Get Android app updates straight from the source.
Daemon to ban hosts that cause multiple authentication errors
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAut...
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of c...
A powerful obfuscator for JavaScript and Node.js
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
A collection of hacking tools, resources and references to practice ethical hacking.
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars &...
The ZAP by Checkmarx Core project
The Rogue Access Point Framework
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
Web path scanner
Source code for Hacker101.com - a free online web and mobile security class.
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced...
World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOp...
OpenVPN is an open source VPN daemon
How to improve NGINX performance, security, and other important things.
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability...
Open-Source Phishing Toolkit
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
🐶 A curated list of Web Security materials and resources.
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to...
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
面向开发人员梳理的代码安全指南
Damn Vulnerable Web Application (DVWA)
Nmap - the Network Mapper. Github mirror of official SVN repository.
Exploitation Framework for Embedded Devices
Free cross-platform password manager compatible with KeePass
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
A vulnerability scanner for container images and filesystems
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Force Remove Copilot, Recall and More in Windows 11
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
OSS-Fuzz - continuous fuzzing for open source software.
Scapy: the Python-based interactive packet manipulation program & library.
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.
A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
A curated list of CTF frameworks, libraries, resources and softwares
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance,...
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, web...
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
Main Sigma Rule Repository