Security

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

The Leading Security Assessment Framework for Android.

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

An Efficient Enterprise-class Container Engine

An OOB interaction gathering server and client library

Knowledge Base 慢雾安全团队知识库

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Популярные HTML / CSS / JavaScript / ECMAScript / TypeScript / React / Vue / Angular / Node вопросы на интервью и ответы на них (https://tinyurl.com/wxysrpsy)

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

CTF竞赛权威指南

A binary authorization and monitoring system for macOS

List of Awesome CobaltStrike Resources

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Collection of the cheat sheets useful for pentesting

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

:key: Cross-Platform Passwords & Secrets Vault

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Free Windows, Mac and Linux cleaner, scanner, and more.

Web-Security-Learning

🐊 Policy Controller for Kubernetes

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

🛡 I2P: End-to-End encrypted and anonymous Internet

A collected list of awesome security talks

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Knock Subdomain Scan