Security

安全工具与实践

wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Ruby 9.8k 1.3k NOASSERTION
hacking-tool scan scanner security +4

bregman-arie/devops-resources

DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP

Groovy 9.7k 2.4k
aws bash checklists containers +11

ashishb/android-security-awesome

A collection of android security related resources

Makefile 9.7k 1.6k Apache-2.0
android awesome awesome-list list +1

spring-projects/spring-security

Spring Security

Java 9.6k 6.3k Apache-2.0
framework java security spring +1

toniblyx/my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Shell 9.5k 1.6k Apache-2.0
auditing aws-infrastructure aws-inventory aws-lambda +7

telekom-security/tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Shell 9.5k 1.4k GPL-3.0
deception docker elk honeypot +3

sensepost/objection

📱 objection - runtime mobile exploration

Python 9.4k 1.0k GPL-3.0
android framework frida instrumentation +4

meirwah/awesome-incident-response

A curated list of tools for incident response

9.4k 1.7k Apache-2.0
awesome awesome-list cybersecurity dfir +4

falcosecurity/falco

Cloud Native Runtime Security

C++ 9.4k 1.1k Apache-2.0
cloud-native cncf cncf-project containers +6

unicorn-engine/unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

C 9.3k 1.5k GPL-2.0
arm arm64 cpu cpu-emulator +14

golang-jwt/jwt

Go implementation of JSON Web Tokens (JWT).

Go 9.2k 443 MIT
auth ed25519 go golang +2

firezone/firezone

Blazing-fast remote access

Elixir 9.1k 456 Apache-2.0
cloud devsecops elixir elixir-lang +12

capstone-engine/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

C 9.0k 1.7k
arm arm64 bpf disassembler +16

jofpin/trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Python 9.0k 1.4k
flask footprint hacking hacking-tool +8

securego/gosec

Go security checker

Go 8.9k 711 Apache-2.0
golang security security-automation security-tools +2

maxgoedjen/secretive

Protect your SSH keys with your Mac's Secure Enclave

Swift 8.9k 212 MIT
mac secure-enclave security ssh

smallstep/certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Go 8.9k 593 Apache-2.0
acme acme-server ca certificate-authority +8

mailpile/Mailpile

A free & open modern, fast email client with user-friendly encryption and privacy features

Python 8.8k 1.0k NOASSERTION
e-mail imap-client pgp search-engine +3

kata-containers/kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

Rust 8.7k 1.5k Apache-2.0
containers cri cri-o docker +9

ViRb3/wgcf

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

Go 8.7k 871 MIT
client cloudflare plus security +3

stamparm/maltrail

Malicious traffic detection system

Python 8.6k 1.3k MIT
attack-detection intrusion-detection malware network-monitoring +4

PrivateBin/PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

PHP 8.6k 1.0k NOASSERTION
crypto cryptography encrypted hacktoberfest +8

ionuttbara/windows-defender-remover

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

Batchfile 8.4k 537 NOASSERTION
defender defender-disabler defender-remover security +3

firerpa/lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Python 8.3k 1.1k MIT
adb agents ai ai-agents +15

superradcompany/microsandbox

🧱 Easy fast local-first microVM runtime and library

Rust 8.3k 439 Apache-2.0
agents docker golang linux +13

PyCQA/bandit

Bandit is a tool designed to find common security issues in Python code.

Python 8.3k 833 Apache-2.0
bandit linter python security +3

kishikawakatsumi/KeychainAccess

Simple Swift wrapper for Keychain that works on iOS, watchOS, tvOS and macOS.

Swift 8.3k 852 MIT
keychain security touch-id

kyverno/kyverno

Unified Policy as Code

Go 8.2k 1.6k Apache-2.0
compliance governance kubernetes policy-as-code +1

linkedin/school-of-sre

At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

HTML 8.1k 739 NOASSERTION
git hadoop linux mysql +6

Graylog2/graylog2-server

Free and open log management

Java 8.1k 1.1k NOASSERTION
amqp gelf graylog hacktoberfest +11