Security

安全工具与实践

cheatsnake/backend-cheats

📃 White paper for Backend developers

5.3k 539 MIT
architectural-patterns architecture awesome awesome-list +15

NullArray/AutoSploit

Automated Mass Exploiter

Python 5.3k 1.2k GPL-3.0
automation exploit exploitation metasploit +4

martin-olivier/airgorah

A WiFi security auditing software

Rust 5.2k 893 MIT
gui kali linux-app security +4

DefectDojo/django-DefectDojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Python 5.2k 2.0k BSD-3-Clause
analytics appsec automation devsecops +11

tenable/terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Go 5.2k 552 Apache-2.0
architecture aws aws-security azure-security +16

libreddit/libreddit

Private front-end for Reddit

Rust 5.2k 253 AGPL-3.0
docker front-end privacy reddit +3

DedSecInside/TorBot

Dark Web OSINT Tool

Python 5.2k 780 NOASSERTION
algorithm crawler dark-web dedsec-inside +16

nicocha30/ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Go 5.2k 503 GPL-3.0
golang offensive-security pentest-tool pentesting +5

cilium/tetragon

eBPF-based Security Observability and Runtime Enforcement

C 5.2k 640 Apache-2.0
bpf ebpf kernel kubernetes +1

lc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Go 5.2k 530 MIT
alienvault gau hacktoberfest security +1

ClearURLs/Addon

ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy.

JavaScript 5.1k 152 LGPL-3.0
addon addons-mozilla-org anti-tracking chrome +5

hahwul/WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Ruby 5.1k 851 MIT
awesome-list bugbounty bugbountytips hacking +5

ossec/ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

C 5.1k 1.1k GPL-2.0
compliance file-integrity-management fim hids +7

pirate/wireguard-docs

📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.

Shell 5.1k 333 MIT
internet kernel-module linux mesh-networking +9

google/google-ctf

Google CTF

Python 5.1k 600 Apache-2.0
ctf ctf-challenges google security

Hack-with-Github/Free-Security-eBooks

Free Security and Hacking eBooks

5.0k 1.1k
cloud-security cyber-security ebooks forensics +6

Security-Onion-Solutions/securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Shell 5.0k 682 NOASSERTION
case-management cyber-security endpoint-security information-security +6

nolabs-ai/nono

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Rust 5.0k 332 Apache-2.0
agent-runtime-security agent-sandbox agent-security ai-agent-sandbox +10

dmno-dev/varlock

AI-safe .env files: Schemas for agents, Secrets for humans.

TypeScript 5.0k 144 MIT
configuration dotenv env env-vars +3

andresriancho/w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Python 4.9k 1.2k
appsec cross-site-scripting scanner security +1

aya-rs/aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Rust 4.9k 485 Apache-2.0
bpf ebpf observability rust +1

urbanadventurer/Android-PIN-Bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

Shell 4.9k 854
android android-security bruteforce kali-linux +4

HotCakeX/Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

C# 4.8k 348 MIT
1st-party-security applicationcontrol audit bitlocker +16

openziti/zrok

Secure internet sharing made simple.

Go 4.8k 230 Apache-2.0
file-sharing golang network peer-to-peer +3

microsoft/PyRIT

Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.

Python 4.8k 1.1k MIT
ai-attacks ai-evals ai-evaluation ai-evaluation-tools +16

0x4D31/awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

4.8k 774
awesome awesome-list detection incident-response +3

jaredthecoder/awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security and car hacking.

4.8k 748 CC0-1.0
automotive awesome awesome-list car-hacking +8

M66B/FairEmail

Fully featured, open source, privacy friendly email app for Android

Java 4.8k 714 GPL-3.0
android app email privacy +1

aquasecurity/tracee

Linux Runtime Security and Forensics using eBPF

Go 4.7k 515 Apache-2.0
bpf docker ebpf golang +4

forter/security-101-for-saas-startups

security tips for startups

4.7k 292 NOASSERTION
chinese security security-considerations startup