Security

安全工具与实践

upgundecha/howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

JavaScript 9.8k 901 CC0-1.0
alerting chaos-engineering dev-ops devops +16

ashishb/android-security-awesome

A collection of android security related resources

Makefile 9.8k 1.6k Apache-2.0
android awesome awesome-list list +1

bregman-arie/devops-resources

DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP

Groovy 9.7k 2.4k
aws bash checklists containers +11

telekom-security/tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Shell 9.7k 1.4k GPL-3.0
deception docker elk honeypot +3

spring-projects/spring-security

Spring Security

Java 9.7k 6.4k Apache-2.0
framework java security spring +1

falcosecurity/falco

Cloud Native Runtime Security

C++ 9.6k 1.1k Apache-2.0
cloud-native cncf cncf-project containers +6

unicorn-engine/unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

C 9.6k 1.6k GPL-2.0
arm arm64 cpu cpu-emulator +14

meirwah/awesome-incident-response

A curated list of tools for incident response

9.6k 1.8k Apache-2.0
awesome awesome-list cybersecurity dfir +4

toniblyx/my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Shell 9.5k 1.6k Apache-2.0
auditing aws-infrastructure aws-inventory aws-lambda +7

sensepost/objection

📱 objection - runtime mobile exploration

Python 9.5k 1.0k GPL-3.0
android framework frida instrumentation +4

maxgoedjen/secretive

Protect your SSH keys with your Mac's Secure Enclave

Swift 9.4k 236 MIT
mac secure-enclave security ssh

golang-jwt/jwt

Go implementation of JSON Web Tokens (JWT).

Go 9.3k 461 MIT
auth ed25519 go golang +2

capstone-engine/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

C 9.2k 1.7k
arm arm64 bpf disassembler +16

firezone/firezone

Blazing-fast remote access

Elixir 9.2k 467 Apache-2.0
cloud devsecops elixir elixir-lang +12

kata-containers/kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

Rust 9.1k 1.5k Apache-2.0
containers cri cri-o docker +9

jofpin/trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Python 9.1k 1.4k
flask footprint hacking hacking-tool +8

smallstep/certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Go 9.1k 618 Apache-2.0
acme acme-server ca certificate-authority +8

superradcompany/microsandbox

🧱 easy, fast, programmable and local-first microVM runtime and library

Rust 9.1k 520 Apache-2.0
agents docker golang linux +13

securego/gosec

Go security checker

Go 9.0k 737 Apache-2.0
golang security security-automation security-tools +2

openbao/openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Go 9.0k 687 MPL-2.0
go secret-management security

ViRb3/wgcf

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

Go 8.9k 882 MIT
client cloudflare plus security +3

mailpile/Mailpile

A free & open modern, fast email client with user-friendly encryption and privacy features

Python 8.8k 997 NOASSERTION
e-mail imap-client pgp search-engine +3

PrivateBin/PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

PHP 8.7k 1.1k NOASSERTION
crypto cryptography encrypted hacktoberfest +8

firerpa/lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

Python 8.7k 1.2k MIT
adb agents ai ai-agents +15

ionuttbara/windows-defender-remover

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

Batchfile 8.7k 549
defender defender-disabler defender-remover security +3

stamparm/maltrail

Malicious traffic detection system

Python 8.7k 1.3k MIT
attack-detection intrusion-detection malware network-monitoring +4

PyCQA/bandit

Bandit is a tool designed to find common security issues in Python code.

Python 8.4k 887 Apache-2.0
bandit linter python security +3

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Shell 8.4k 1.3k MIT
bug-bounty bugbounty bugbounty-tool dns +15

kyverno/kyverno

Unified Policy as Code

Go 8.3k 1.7k Apache-2.0
compliance governance kubernetes policy-as-code +1

kishikawakatsumi/KeychainAccess

Simple Swift wrapper for Keychain that works on iOS, watchOS, tvOS and macOS.

Swift 8.3k 858 MIT
keychain security touch-id