Security

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

A collection of hacking tools, resources and references to practice ethical hacking.

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Web path scanner

The Rogue Access Point Framework

OpenVPN is an open source VPN daemon

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

Database governance built for humans and agents — controlling changes and access across every major database.

Source code for Hacker101.com - a free online web and mobile security class.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Open-Source Phishing Toolkit

How to improve NGINX performance, security, and other important things.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

🐶 A curated list of Web Security materials and resources.

Damn Vulnerable Web Application (DVWA)

Nmap - the Network Mapper. Github mirror of official SVN repository.

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

面向开发人员梳理的代码安全指南

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Exploitation Framework for Embedded Devices

A vulnerability scanner for container images and filesystems

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

Free cross-platform password manager compatible with KeePass

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

OSS-Fuzz - continuous fuzzing for open source software.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Scapy: the Python-based interactive packet manipulation program & library.

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss