Security
安全工具与实践
cheatsnake/backend-cheats
📃 White paper for Backend developers
NullArray/AutoSploit
Automated Mass Exploiter
martin-olivier/airgorah
A WiFi security auditing software
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
tenable/terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
libreddit/libreddit
Private front-end for Reddit
DedSecInside/TorBot
Dark Web OSINT Tool
nicocha30/ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
cilium/tetragon
eBPF-based Security Observability and Runtime Enforcement
lc/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
ClearURLs/Addon
ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy.
hahwul/WebHackersWeapons
⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
ossec/ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
pirate/wireguard-docs
📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.
google/google-ctf
Google CTF
Hack-with-Github/Free-Security-eBooks
Free Security and Hacking eBooks
Security-Onion-Solutions/securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
nolabs-ai/nono
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
dmno-dev/varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
andresriancho/w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
aya-rs/aya
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
urbanadventurer/Android-PIN-Bruteforce
Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)
HotCakeX/Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
openziti/zrok
Secure internet sharing made simple.
microsoft/PyRIT
Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.
0x4D31/awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
jaredthecoder/awesome-vehicle-security
🚗 A curated list of resources for learning about vehicle security and car hacking.
M66B/FairEmail
Fully featured, open source, privacy friendly email app for Android
aquasecurity/tracee
Linux Runtime Security and Forensics using eBPF
forter/security-101-for-saas-startups
security tips for startups