Security

安全工具与实践

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++ 8.2k 1.5k NOASSERTION
bro dfir ndr network-monitoring +4

trickest/cve

Gather and update all available and newest CVEs with their PoC.

HTML 8.2k 981 MIT
cve cve-poc exploit hacking +13

nomi-sec/PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

8.2k 1.4k CC0-1.0
cve exploit poc security +1

Graylog2/graylog2-server

Free and open log management

Java 8.2k 1.1k NOASSERTION
amqp gelf graylog hacktoberfest +11

tutao/tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

TypeScript 8.2k 654 GPL-3.0
email encryption javascript mithril +3

linkedin/school-of-sre

At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

HTML 8.2k 737 NOASSERTION
git hadoop linux mysql +6

v1s1t0r1sh3r3/airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

Shell 8.1k 1.3k GPL-3.0
aircrack bash beef denial-of-service +16

turbot/steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Go 8.0k 347 AGPL-3.0
aws azure cis cloud +16

aircrack-ng/aircrack-ng

WiFi security auditing tools suite

C 7.9k 1.4k GPL-2.0
audit freeradius hostapd security +3

yaklang/yakit

Cyber Security ALL-IN-ONE Platform

TypeScript 7.9k 834 AGPL-3.0
blueteam burpsuite exploit golang +7

nccgroup/ScoutSuite

Multi-Cloud Security Auditing Tool

Python 7.9k 1.2k GPL-2.0
auditing aws azure cloud +2

jakejarvis/awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

7.8k 1.0k CC0-1.0
awesome awesome-list cloud dorks +12

dependency-check/DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Java 7.8k 1.4k Apache-2.0
ant-task build-tool gradle-plugin jenkins-plugin +5

anthropics/defending-code-reference-harness

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

Python 7.7k 643 NOASSERTION
security

0xInfection/Awesome-WAF

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Python 7.7k 1.2k Apache-2.0
awesome awesome-list bypass-waf firewall +9

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

C 7.6k 1.2k Apache-2.0
big-data c javascript network-monitoring +4

ConsenSysDiligence/smart-contract-best-practices

A guide to smart contract security best practices

HTML 7.6k 1.5k
blockchain documentation ethereum security +2

Tencent/AI-Infra-Guard

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

Python 7.5k 757 Apache-2.0
agent agent-security agentic-ai ai-infra +16

bleachbit/bleachbit

BleachBit system cleaner for Windows and Linux

Python 7.5k 488 GPL-3.0
antiforensics bleachbit ccleaner-alternative cleaner +16

projectcalico/calico

Cloud native networking and network security

Go 7.4k 1.6k Apache-2.0
cats cni cni-plugin ebpf +13

netalertx/NetAlertX

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Python 7.4k 468 GPL-3.0
arp-scan asset-management dcim ipam +10

jonasstrehle/supercookie

⚠️ Browser fingerprinting via favicon!

HTML 7.4k 372 MIT
browser browser-fingerprint browser-fingerprinting chrome +16

infoslack/awesome-web-hacking

A list of web application security

7.4k 1.4k MIT
appsec hacking hacking-tools metasploit +9

bee-san/pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

Python 7.4k 391 MIT
cyber cybersecurity hacking hacktoberfest +8

gopasspw/gopass

The slightly more awesome standard unix password manager for teams

Go 7.3k 569 MIT
git go gpg hacktoberfest +2

presidentbeef/brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

Ruby 7.3k 779 NOASSERTION
brakeman rails ruby security +5

onionshare/onionshare

Securely and anonymously share files, host websites, and chat with friends using the Tor network

Python 7.2k 742 NOASSERTION
cross-platform file-sharing onion-service onionshare +5

authzed/spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Go 7.2k 449 Apache-2.0
abac acl authorization ciam +14

fleetdm/fleet

Open device management

Go 7.2k 1.1k NOASSERTION
binary-authorization configuration-management device-management gitops +14

lwthiker/curl-impersonate

curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

Python 7.2k 611 MIT
curl https security ssl +1