Security

安全工具与实践

crowdsecurity/crowdsec

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

Go 14.9k 718 MIT
attacks-prevention detection ids ips +4

sbilly/awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

14.9k 2.4k MIT
awesome-list security

wifiphisher/wifiphisher

The Rogue Access Point Framework

Python 14.8k 2.7k GPL-3.0
access-point attack malware phishing +6

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Python 14.8k 2.4k Apache-2.0
aws azure cis-benchmark cloud +16

maurosoria/dirsearch

Web path scanner

Python 14.7k 2.4k
appsec brute bug-bounty bugbounty +16

shadow1ng/fscan

一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

Go 14.6k 1.9k MIT
fscan scanner scanning sec +2

OpenVPN/openvpn

OpenVPN is an open source VPN daemon

C 14.6k 3.4k NOASSERTION
security vpn

Hacker0x01/hacker101

Source code for Hacker101.com - a free online web and mobile security class.

SCSS 14.5k 2.7k NOASSERTION
clickjacking csrf education hacker101 +10

bytebase/bytebase

Database governance built for humans and agents — controlling changes and access across every major database.

Go 14.5k 983 NOASSERTION
cicd data-governance data-masking data-security +16

trimstray/nginx-admins-handbook

How to improve NGINX performance, security, and other important things.

Shell 14.3k 1.1k MIT
best-practices cheatsheet hacks handbook +13

gophish/gophish

Open-Source Phishing Toolkit

Go 14.2k 3.0k NOASSERTION
golang gophish phishing security

evilsocket/opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Python 14.1k 664 GPL-3.0
application-firewall data-breach firewall linux +2

juice-shop/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

TypeScript 13.9k 19.6k MIT
24pullrequests application-security appsec ctf +10

qazbnm456/awesome-web-security

🐶 A curated list of Web Security materials and resources.

Python 13.8k 1.8k
awesome awesome-list list penetration-testing +3

digininja/DVWA

Damn Vulnerable Web Application (DVWA)

PHP 13.7k 5.1k GPL-3.0
dvwa hacking infosec php +3

nmap/nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

C 13.6k 2.9k NOASSERTION
asynchronous c-plus-plus libpcap linux +13

tink-crypto/tink

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

Java 13.5k 1.2k Apache-2.0
cpp crypto cryptography go +4

Tencent/secguide

面向开发人员梳理的代码安全指南

13.5k 1.9k NOASSERTION
guide security

threat9/routersploit

Exploitation Framework for Embedded Devices

Python 13.2k 2.4k NOASSERTION
bruteforce creds dictionary-attack embedded +9

mvt-project/mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Python 13.1k 1.3k NOASSERTION
android forensics forensics-tools ios +2

zoicware/RemoveWindowsAI

Force Remove Copilot, Recall and More in Windows 11

PowerShell 13.0k 459 MIT
ai bloatware bloatware-removal copilot +10

keeweb/keeweb

Free cross-platform password manager compatible with KeePass

HTML 13.0k 1.2k NOASSERTION
electron javascript keepass keeweb +3

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

JavaScript 13.0k 3.7k MIT
bugbounty exploit-development exploits fingerprint +6

anchore/grype

A vulnerability scanner for container images and filesystems

Go 12.9k 881 Apache-2.0
container-image containers cyclonedx docker +11

arkenfox/user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

JavaScript 12.9k 557 MIT
anti-fingerprinting anti-tracking arkenfox firefox +4

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

Shell 12.7k 2.9k Apache-2.0
fuzz-testing fuzzing oss-fuzz security +2

jopohl/urh

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Python 12.6k 1.1k GPL-3.0
airspy bladerf hacking hackrf +11

secdev/scapy

Scapy: the Python-based interactive packet manipulation program & library.

Python 12.5k 2.2k GPL-2.0
hacktoberfest network network-analysis network-discovery +11

drduh/YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

HTML 12.5k 1.2k MIT
gnupg gpg gpg-agent gpg-configuration +14

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Go 12.3k 1.2k GPL-3.0
administrator cybersecurity freebsd go +16