Security

:key: Cross-Platform Passwords & Secrets Vault

🚗 A curated list of resources for learning about vehicle security and car hacking.

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Dark Web OSINT Tool

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Collection of the cheat sheets useful for pentesting

Web-Security-Learning

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

🐊 Policy Controller for Kubernetes

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

A collected list of awesome security talks

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

Knock Subdomain Scan

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

🛡 I2P: End-to-End encrypted and anonymous Internet

An experiment.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Advanced vm/sandbox for Node.js

Boundary enables identity-based access management for dynamic infrastructure.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

✔️ Secure, simple key-value storage for Android