Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
A small client application that uses the Duo Labs EFIgy API to inform you about the state of your Mac EFI firmware
Fast HTTP enumerator
Bridge from the pac4j security library to Shiro
study material used for the 2018 CISSP exam
Capability-oriented version of the Rust standard library
This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.
Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible
Aardvark is a multi-account AWS IAM Access Advisor API
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
Capillary is a library to simplify the sending of end-to-end encrypted push messages from Java-based application servers to Android clients.
Meta-repository for Miscreant: misuse-resistant symmetric encryption library with AES-SIV (RFC 5297) and AES-PMAC-SIV support
Credential stuffing engine built for security professionals
Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protect...
Smart Contract security audit reports
Awesome Ruby Security resources
Web漏洞演练平台
QNSM is network security monitoring framework based on DPDK.
🔓✨🔒 An innovative, convenient and secure encryption app
Android security guides, roadmap, docs, courses, write-ups, and teryaagh.
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or...
Web application vulnerability scanner
Public append-only ledger microservice built with Slim Framework
A high performance DNS cache designed for Content Delivery Networks
Go fearless SQL. Sqlvet performs static analysis on raw SQL queries in your Go code base.
An in depth tutorial on how to do binary exploitation
A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at https://gitlab.torproject.org/tpo/network-hea...
Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
Proof of concept for abusing Telegram's "People Near Me" feature and tracking people's location
DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request re...
This chef cookbook provides numerous security-related configurations, providing all-round base protection.
Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
A comfortable update solution for .NET-applications.
Security event correlation engine for ELK stack
Scripts built from our Guide to User Data Security
:notebook: Some security related notes
用于记录企业安全规划,建设,运营,攻防的相关资源
Investigate suspicious activity by visualizing Sysmon's event log
Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine...
TESLA PowerWall 2 Security Shenanigans
How Secure is My Password for your own website
Kubernetes security tool for policy enforcement
swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux...
Data analysis and OSINT framework for Twitter
Red Team Tactics, Techniques, and Procedures
Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
Research on GraphQL from an AppSec point of view.
OCI (Open Containers Initiative) compatible runtime for Intel® Architecture
Droidefense: Advance Android Malware Analysis Framework