security

🎯 Command Injection Payload List

The Github home of Orbot: Tor on Android (Also available on gitlab!)

TextAttack 🐙 is a Python framework for adversarial attacks, data augmentation, and model training in NLP https://textattack.readthedocs.io/en/master...

An ArchLinux based distribution for penetration testers and security researchers.

Reusable, vendor-neutral, industry-specific, vendor-specific solution architecture patterns for enterprise

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

awesome game security [Welcome to PR]

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

👻Stowaway -- Multi-hop Proxy Tool for pentesters

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, fore...

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

Collaborative forensic timeline analysis

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Connect any AI model to 1200+ integrations (MCP, CLI, API)

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

A collection of custom security tools for quick needs.

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

一个基于✨HOOK机制的微信机器人，支持🌱安全新闻定时推送【FreeBuf，先知，安全客，奇安信攻防社区】，👯Kfc文案，⚡漏洞查询，⚡手机号归属地查询，⚡知识库查...

Platform Security Assessment Framework

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Basic rate-limiting middleware for the Express web server

Neo.mjs is a self-evolving software organism: a professional end-to-end AI engineering team whose cross-model swarm inhabits live apps via Neural Link...

A self-contained cryptographic library for Python

The official repo for Blokada apps.

OWASP CRS (Official Repository)

the TCPdump network dissector

Investigate malicious Windows logon by visualizing and analyzing Windows event log

📱 Wire for iOS (iPhone and iPad)

A kernel designed to run one and only one application in a virtualized environment

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with...

Ethereum smart contract fuzzer

Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.

Safely pass trusted data to untrusted environments and back.

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services

Oso is a batteries-included framework for building authorization in your application.

Setup guide for NextDNS, a DoH proxy with advanced capabilities

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernet...

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

UICKeyChainStore is a simple wrapper for Keychain on iOS, watchOS, tvOS and macOS. Makes using Keychain APIs as easy as NSUserDefaults.

Jasypt integration for Spring boot

InSpec: Auditing and Testing Framework

Interesting APT Report Collection And Some Special IOCs

Open source smart card tools and middleware. PKCS#11/MiniDriver

ContainerSSH: Launch containers on demand

:lock: Memorable site for testing clients against bad SSL configs.

A microservices API Gateway built on top of Express.js

Awesome Node.js Security resources