Security

An OOB interaction gathering server and client library

List of Awesome CobaltStrike Resources

🚗 A curated list of resources for learning about vehicle security and car hacking.

:key: Cross-Platform Passwords & Secrets Vault

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Collection of the cheat sheets useful for pentesting

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

Web-Security-Learning

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

🐊 Policy Controller for Kubernetes

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

A collected list of awesome security talks

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

Knock Subdomain Scan

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

🛡 I2P: End-to-End encrypted and anonymous Internet

An experiment.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Advanced vm/sandbox for Node.js

Boundary enables identity-based access management for dynamic infrastructure.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

✔️ Secure, simple key-value storage for Android