Security

安全工具与实践

turbot/steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Go 7.9k 339 AGPL-3.0
aws azure cis cloud +16

v1s1t0r1sh3r3/airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

Shell 7.9k 1.3k GPL-3.0
aircrack bash beef denial-of-service +16

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++ 7.8k 1.4k NOASSERTION
bro dfir ndr network-monitoring +4

tutao/tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

TypeScript 7.8k 627 GPL-3.0
email encryption javascript mithril +3

nccgroup/ScoutSuite

Multi-Cloud Security Auditing Tool

Python 7.8k 1.2k GPL-2.0
auditing aws azure cloud +2

yaklang/yakit

Cyber Security ALL-IN-ONE Platform

TypeScript 7.6k 819 AGPL-3.0
blueteam burpsuite exploit golang +7

dependency-check/DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Java 7.6k 1.4k Apache-2.0
ant-task build-tool gradle-plugin jenkins-plugin +5

jakejarvis/awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

7.6k 1.0k CC0-1.0
awesome awesome-list cloud dorks +12

ConsenSysDiligence/smart-contract-best-practices

A guide to smart contract security best practices

HTML 7.6k 1.5k
blockchain documentation ethereum security +2

0xInfection/Awesome-WAF

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Python 7.6k 1.2k Apache-2.0
awesome awesome-list bypass-waf firewall +9

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

C 7.4k 1.2k Apache-2.0
big-data c javascript network-monitoring +4

aircrack-ng/aircrack-ng

WiFi security auditing tools suite

C 7.4k 1.3k GPL-2.0
audit freeradius hostapd security +3

jonasstrehle/supercookie

⚠️ Browser fingerprinting via favicon!

HTML 7.4k 367 MIT
browser browser-fingerprint browser-fingerprinting chrome +16

projectcalico/calico

Cloud native networking and network security

Go 7.3k 1.6k Apache-2.0
cats cni cni-plugin ebpf +13

bee-san/pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

Python 7.3k 387 MIT
cyber cybersecurity hacking hacktoberfest +8

presidentbeef/brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

Ruby 7.3k 772 NOASSERTION
brakeman rails ruby security +5

infoslack/awesome-web-hacking

A list of web application security

7.2k 1.4k MIT
appsec hacking hacking-tools metasploit +9

facebook/pyre-check

Performant type-checking for python.

OCaml 7.2k 452 MIT
abstract-interpretation code-quality control-flow-analysis ocaml +7

hwdsl2/docker-ipsec-vpn-server

Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.

Shell 7.1k 1.5k NOASSERTION
cisco-ipsec docker docker-compose docker-image +15

gopasspw/gopass

The slightly more awesome standard unix password manager for teams

Go 7.1k 556 MIT
git go gpg hacktoberfest +2

superradcompany/microsandbox

🧱 easy fast local-first microVM runtime and library

Rust 7.0k 362 Apache-2.0
agents docker golang linux +13

onionshare/onionshare

Securely and anonymously share files, host websites, and chat with friends using the Tor network

Python 7.0k 712 NOASSERTION
cross-platform file-sharing onion-service onionshare +5

aquasecurity/tfsec

Tfsec is now part of Trivy

Go 7.0k 555 MIT
aws azure ci compliance +15

paragonie/awesome-appsec

A curated list of resources for learning about application security

PHP 7.0k 803 MIT
application-security curated owasp reading-list +2

authzed/spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Go 6.9k 406 Apache-2.0
abac acl authorization ciam +14

anthropics/defending-code-reference-harness

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

Python 6.9k 551 NOASSERTION
security

openbao/openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Go 6.8k 514 MPL-2.0
go secret-management security

netalertx/NetAlertX

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Python 6.8k 425 GPL-3.0
arp-scan asset-management dcim ipam +10

daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

6.8k 1.3k
bug bugbounty bugbountytips bypass +9

sottlmarek/DevSecOps

Ultimate DevSecOps library

6.8k 1.2k MIT
automation awesome awesome-list aws +15