Security
安全工具与实践
zeek/zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
trickest/cve
Gather and update all available and newest CVEs with their PoC.
nomi-sec/PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Graylog2/graylog2-server
Free and open log management
tutao/tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
linkedin/school-of-sre
At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.
v1s1t0r1sh3r3/airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
turbot/steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
aircrack-ng/aircrack-ng
WiFi security auditing tools suite
yaklang/yakit
Cyber Security ALL-IN-ONE Platform
nccgroup/ScoutSuite
Multi-Cloud Security Auditing Tool
jakejarvis/awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
anthropics/defending-code-reference-harness
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
0xInfection/Awesome-WAF
Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
arkime/arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
ConsenSysDiligence/smart-contract-best-practices
A guide to smart contract security best practices
Tencent/AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
bleachbit/bleachbit
BleachBit system cleaner for Windows and Linux
projectcalico/calico
Cloud native networking and network security
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
jonasstrehle/supercookie
⚠️ Browser fingerprinting via favicon!
infoslack/awesome-web-hacking
A list of web application security
bee-san/pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
gopasspw/gopass
The slightly more awesome standard unix password manager for teams
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
onionshare/onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
authzed/spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
fleetdm/fleet
Open device management
lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox