Security

安全工具与实践

jason5ng32/MyIP

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

JavaScript 12.4k 1.3k AGPL-3.0
awesome censorship dns dnsleak +16

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Go 12.3k 1.2k GPL-3.0
administrator cybersecurity freebsd go +16

majd/ipatool

Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

Go 12.3k 1.1k MIT
apple appstore cli command-line +14

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

JavaScript 12.0k 1.6k CC0-1.0
awesome ctf penetration security

trimstray/test-your-sysadmin-skills

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

11.9k 1.7k MIT
answers bsd cheatsheets cybersecurity +16

kubescape/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Go 11.9k 1.1k Apache-2.0
best-practice devops kubernetes mitre-attack +3

docker-archive-public/docker.labs

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

PHP 11.9k 5.1k Apache-2.0
containers docker docker-compose docker-tutorial +8

gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Go 11.9k 667 NOASSERTION
cloud devsecops ipv6-support k8s +16

chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Vue 11.8k 1.9k NOASSERTION
passive-vulnerability-scanner poc security sqlinjection +3

1N3/Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

Shell 11.5k 2.2k NOASSERTION
attack-surface attack-surface-management attacksurface bugbounty-platform +15

knownsec/404StarLink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

11.5k 979
opensource security tools

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Shell 11.5k 1.1k MIT
awesome awesome-list awesome-lists bugbounty +15

SigmaHQ/sigma

Main Sigma Rule Repository

Python 11.5k 2.9k NOASSERTION
elasticsearch ids logging monitoring +5

bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Python 11.3k 675 AGPL-3.0
antibot cybersecurity devops devsecops +16

frappe/frappe

Low code web framework for real world applications, in Python and Javascript

Python 11.1k 5.5k MIT
cms email erpnext frappe +12

monero-project/monero

Monero: the secure, private, untraceable cryptocurrency

C++ 11.0k 3.5k NOASSERTION
blockchain c-plus-plus cmake cryptocurrency +6

yokoffing/Betterfox

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

JavaScript 11.0k 258 MIT
anti-tracking firefox gecko mozilla +7

shadowsocks/shadowsocks-rust

A Rust port of shadowsocks

Rust 11.0k 1.5k MIT
http-proxy rust security shadowsocks +3

trimstray/the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

10.9k 699 MIT
audit centos checklist cis +10

Mail-0/Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

TypeScript 10.9k 1.3k MIT
ai email privacy security

hslatman/awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

10.9k 1.9k Apache-2.0
awesome awesome-list hacktoberfest security

helmetjs/helmet

Help secure Express apps with various HTTP headers

TypeScript 10.7k 414 MIT
helmet http-headers javascript middleware +1

OpenCTI-Platform/opencti

Open Cyber Threat Intelligence Platform

TypeScript 10.4k 1.5k NOASSERTION
cti cyber cybersecurity intelligence +3

veeral-patel/how-to-secure-anything

How to systematically secure anything: a repository about security engineering

10.3k 700
secure-design secure-systems security security-architecture +3

OWASP/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

CSS 10.3k 1.7k CC-BY-SA-4.0
application-security appsec best-practices bugbounty +7

samratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

PowerShell 10.2k 2.5k NOASSERTION
activedirectory hacking infosec nishang +5

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

Astro 10.1k 701 CC0-1.0
awesome awesome-list privacy security +2

go-acme/lego

Let's Encrypt/ACME client and library written in Go

Go 10.0k 1.2k MIT
acme acme-client certificate dns +6

quasar/Quasar

Remote Administration Tool for Windows

C# 9.9k 2.7k MIT
administration c-sharp dotnet mono +9

wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Ruby 9.9k 1.3k NOASSERTION
hacking-tool scan scanner security +4