Security

安全工具与实践

docker-archive-public/docker.labs

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

PHP 11.9k 5.2k Apache-2.0
containers docker docker-compose docker-tutorial +8

jason5ng32/MyIP

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

JavaScript 11.9k 1.2k MIT
awesome censorship dns dnsleak +16

trimstray/test-your-sysadmin-skills

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

11.9k 1.7k MIT
answers bsd cheatsheets cybersecurity +16

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

JavaScript 11.9k 1.6k CC0-1.0
awesome ctf penetration security

gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Go 11.8k 651 NOASSERTION
cloud devsecops ipv6-support k8s +16

chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Vue 11.7k 1.9k NOASSERTION
passive-vulnerability-scanner poc security sqlinjection +3

kubescape/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Go 11.7k 1.0k Apache-2.0
best-practice devops kubernetes mitre-attack +3

majd/ipatool

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

Go 11.3k 940 MIT
apple appstore cli command-line +14

knownsec/404StarLink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

11.2k 961
opensource security tools

1N3/Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Shell 11.2k 2.2k NOASSERTION
attack-surface attack-surface-management attacksurface bugbounty-platform +15

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Shell 11.2k 1.1k MIT
awesome awesome-list awesome-lists bugbounty +16

SigmaHQ/sigma

Main Sigma Rule Repository

Python 11.0k 2.8k NOASSERTION
elasticsearch ids logging monitoring +5

bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Python 11.0k 643 AGPL-3.0
antibot cybersecurity devops devsecops +16

shadowsocks/shadowsocks-rust

A Rust port of shadowsocks

Rust 10.9k 1.4k MIT
http-proxy rust security shadowsocks +3

yokoffing/Betterfox

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

JavaScript 10.9k 257 MIT
anti-tracking firefox gecko mozilla +7

monero-project/monero

Monero: the secure, private, untraceable cryptocurrency

C++ 10.9k 3.5k NOASSERTION
blockchain c-plus-plus cmake cryptocurrency +6

trimstray/the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

10.8k 694 MIT
audit centos checklist cis +10

Mail-0/Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

TypeScript 10.8k 1.3k MIT
ai email privacy security

frappe/frappe

Low code web framework for real world applications, in Python and Javascript

Python 10.8k 5.3k MIT
cms email erpnext frappe +12

openai/codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

TypeScript 10.7k 795 Apache-2.0
ai-security application-security cli code-scanning +11

helmetjs/helmet

Help secure Express apps with various HTTP headers

TypeScript 10.7k 412 MIT
helmet http-headers javascript middleware +1

hslatman/awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

10.6k 1.8k Apache-2.0
awesome awesome-list hacktoberfest security

veeral-patel/how-to-secure-anything

How to systematically secure anything: a repository about security engineering

10.2k 700
secure-design secure-systems security security-architecture +3

samratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

PowerShell 10.1k 2.5k NOASSERTION
activedirectory hacking infosec nishang +5

OpenCTI-Platform/opencti

Open Cyber Threat Intelligence Platform

TypeScript 10.0k 1.5k NOASSERTION
cti cyber cybersecurity intelligence +3

quasar/Quasar

Remote Administration Tool for Windows

C# 9.9k 2.7k MIT
administration c-sharp dotnet mono +9

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

Astro 9.9k 658 CC0-1.0
awesome awesome-list privacy security +2

go-acme/lego

Let's Encrypt/ACME client and library written in Go

Go 9.9k 1.2k MIT
acme acme-client certificate dns +6

OWASP/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Python 9.8k 1.7k CC-BY-SA-4.0
application-security appsec best-practices bugbounty +7

upgundecha/howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

JavaScript 9.8k 896 CC0-1.0
alerting chaos-engineering dev-ops devops +16