Security
安全工具与实践
lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
bleachbit/bleachbit
BleachBit system cleaner for Windows and Linux
microsoft/Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
daffainfo/AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
sottlmarek/DevSecOps
Ultimate DevSecOps library
fleetdm/fleet
Open device management
urbanadventurer/WhatWeb
Next generation web scanner
CTFd/CTFd
CTFs as you need them
chaifeng/ufw-docker
To fix the Docker and UFW security flaw without disabling iptables
AFLplusplus/AFLplusplus
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
superagent-ai/superagent
Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.
infobyte/faraday
Open Source Vulnerability Management Platform
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
fulldecent/system-bus-radio
Transmits AM radio on computers without radio transmitting hardware.
OISF/suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
xairy/linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
j3ssie/osmedeus
A Modern Orchestration Engine for Security
EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
decalage2/awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
reddelexc/hackerone-reports
Top disclosed reports from HackerOne
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
zizmorcore/zizmor
Static analysis for GitHub Actions
lldap/lldap
Light LDAP implementation
yeahhub/Hacking-Security-Ebooks
Top 100 Hacking & Security E-Books (Free Download)
cleverhans-lab/cleverhans
An adversarial example library for constructing attacks, building defenses, and benchmarking both
Tencent/AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
ikarus23/MifareClassicTool
An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.
datreeio/datree
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
google/syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer