Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Scan your code for security misconfiguration, search for passwords and secrets. :mag:
Emotet detection tool for Windows OS
Steeltoe samples and reference application collection
:vertical_traffic_light:Web Application Firewall or API Gateway(应用防火墙/API网关)
Tools, scripts and tips useful during Penetration Testing engagements.
0day安全_软件漏洞分析技术
A security extension for devise, meeting industry-standard security demands for web applications.
A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
An example Node.js Relying Party implementation of the WebAuthn specification
Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify sus...
JSshell - JavaScript reverse/remote shell
All in One Recon Tool for Bug Bounty
Linux privilege escalation exploit via snapd (CVE-2019-7304)
http://firewalla.com
Exploit allowing you to read registry hives as non-admin on Windows 10 and 11
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
Automation and Scaling of Digital Forensics Tools
Home of the dionaea honeypot
Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing
Repository to store what we have studied. :book: We want everyone to get a job through TechnicalNote.
Simplify Your Secrets
Firefox's Lockwise app for Android
:books:Translate the distinct technical blogs. Please star or watch. Welcome to join me.
coyim - a safe and secure chat client
Easily connect to and switch between, OpenVPN servers hosted by NordVPN on Linux (+patch leakes)
Curiefense is a unified, open source platform protecting cloud native applications.
Web Application Security Scanner
Zip Slip Vulnerability (Arbitrary file write through archive extraction)
:lock: Secure localStorage data with high level of encryption and data compression
all paths lead to clouds
GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
Open Source Security Guide. Learn all about Security Standards, Frameworks, Threat Models, Encryption, and Benchmarks.
Hacker, ready for more of our story ! 🚀
Send a welcome notification to new users
wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.
Two-factor authentication for Symfony applications 🔐
ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
Auto Scanning to SSL Vulnerability
A pure Python steganography module.
OCI (Open Containers Initiative) compatible runtime using Virtual Machines
mXtract - Memory Extractor & Analyzer
A Security Framework for Python applications featuring Authorization (rbac permissions and roles), Authentication (2fa totp), Session Management and a...
Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by is...
:white_check_mark: .NET crypto done right. Professionally audited.
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Ansible Role - iptables Firewall configuration.
CMS渗透测试框架-A CMS Exploit Framework
Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and OpenCV for Remote Headless Security Monitoring using Motion Tracking, Rcl...
PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with ty...
The source repository for the Trusted Platform Module (TPM2.0) tools