Security

Performant type-checking for python.

Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.

A curated list of resources for learning about application security

Tfsec is now part of Trivy

8 Lessons, Kick-start Your Cybersecurity Learning.

Static analysis for GitHub Actions (and more)

Next generation web scanner

All about bug bounty (bypasses, payloads, and etc)

Ultimate DevSecOps library

CTFs as you need them

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

To fix the Docker and UFW security flaw without disabling iptables

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Transmits AM radio on computers without radio transmitting hardware.

A collection of links related to Linux kernel security and exploitation

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Top disclosed reports from HackerOne

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A Modern Orchestration Engine for Security

Light LDAP implementation

A collection of awesome security hardening guides, tools and other resources

A list of interesting payloads, tips and tricks for bug bounty hunters.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.

Top 100 Hacking & Security E-Books (Free Download)

An adversarial example library for constructing attacks, building defenses, and benchmarking both

syzkaller is an unsupervised coverage-guided kernel fuzzer