security

At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

Free and open log management

Unified Policy as Code

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnera...

Gather and update all available and newest CVEs with their PoC.

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

This is a multi-use bash script for Linux systems to audit wireless networks.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

Multi-Cloud Security Auditing Tool

Cyber Security ALL-IN-ONE Platform

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

WiFi security auditing tools suite

A guide to smart contract security best practices

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

⚠️ Browser fingerprinting via favicon!

Cloud native networking and network security

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it i...

A static analysis security vulnerability scanner for Ruby on Rails applications

A list of web application security

The slightly more awesome standard unix password manager for teams

Performant type-checking for python.

Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux,...

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Securely and anonymously share files, host websites, and chat with friends using the Tor network

A curated list of resources for learning about application security

Tfsec is now part of Trivy

BleachBit system cleaner for Windows and Linux

curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

Open device management

Ultimate DevSecOps library

8 Lessons, Kick-start Your Cybersecurity Learning.

Next generation web scanner

All about bug bounty (bypasses, payloads, and etc)

CTFs as you need them

To fix the Docker and UFW security flaw without disabling iptables

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, M...

Open Source Vulnerability Management Platform

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove com...

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

Transmits AM radio on computers without radio transmitting hardware.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Sur...

A collection of links related to Linux kernel security and exploitation

A Modern Orchestration Engine for Security