Security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Web path scanner

Source code for Hacker101.com - a free online web and mobile security class.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

OpenVPN is an open source VPN daemon

How to improve NGINX performance, security, and other important things.

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

Open-Source Phishing Toolkit

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

🐶 A curated list of Web Security materials and resources.

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

面向开发人员梳理的代码安全指南

Damn Vulnerable Web Application (DVWA)

Nmap - the Network Mapper. Github mirror of official SVN repository.

Exploitation Framework for Embedded Devices

Free cross-platform password manager compatible with KeePass

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A vulnerability scanner for container images and filesystems

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Force Remove Copilot, Recall and More in Windows 11

OSS-Fuzz - continuous fuzzing for open source software.

Scapy: the Python-based interactive packet manipulation program & library.

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.