Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license...
A VBA parser and emulation engine to analyze malicious macros.
☁️ Securely connect anything with WireGuard® and manage all your networks from a single place.
Creates Wireguard configuration for hub and peers with ease
vet is a command-line tool that acts as a safety net for the risky curl | bash pattern. It lets you inspect, diff against previous versions, and lint...
DotDotPwn - The Directory Traversal Fuzzer
Secure chat software for your computer.
Authenticate socket.io incoming connections with JWTs
Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/pr...
A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supp...
Protect against malicious open source packages 🤖
a file-sharing tool that allows you to find the responsible person in case of a leakage
↕️🤫 Stealth redirector for your red team operation security
A flexible control server for osquery fleets
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This tools...
A WiFi security auditing software mainly based on aircrack-ng tools suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
A Rust implementation of the Noise Protocol Framework
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
Container introspection tool. Find out what container runtime is being used as well as features available.
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
The successor to xp-AntiSpy, designed for the modern Windows experience
OpenClaw Security Vault — Atomic "claw" control: every AI reach, within your sight.
Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query
CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
JSON Web Token Hack Toolkit
Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflow...
zmNinja is no longer being maintained. Please use zmNinjaNg
Self contained htaccess shells and attacks
Security Apps for Android
Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
API聚合网关 An Aggregation API Gateway 大模型网关、API集成、API脱敏、API安全、API溯源、
µTox the lightest and fluffiest Tox client
A manager for ssh-agent and gpg-agent, now in Python.
Monitor your local neighbourhood's bluetooth activity
Automated System Hardening Framework
droast - a dockerfile linter that actually has opinions 🔥
PCI-DSS compliant Debian 12/13 hardening
JAVA安全SDK及编码规范
Pythonic WebAuthn 🐍
Taking one back for Steve Irwin (๑•̀ㅂ•́)و
Statically-linked ssh server with reverse shell functionality for CTFs and such
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask...
Yet, just another hexo plugin for security.
Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.
T Wiki 云安全知识文库,可能是国内首个云安全知识文库?
Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
Username enumeration and password spraying tool aimed at Microsoft O365.