Security

安全工具与实践

trimstray/test-your-sysadmin-skills

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

11.7k 1.7k MIT
answers bsd cheatsheets cybersecurity +16

gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Go 11.7k 647 NOASSERTION
cloud devsecops ipv6-support k8s +16

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

JavaScript 11.7k 1.6k CC0-1.0
awesome ctf penetration security

chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Vue 11.7k 1.9k NOASSERTION
passive-vulnerability-scanner poc security sqlinjection +3

kubescape/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Go 11.5k 955 Apache-2.0
best-practice devops kubernetes mitre-attack +3

jason5ng32/MyIP

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

JavaScript 11.1k 1.2k MIT
awesome censorship dns dnsleak +15

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Shell 10.9k 1.0k MIT
awesome awesome-list awesome-lists bugbounty +16

knownsec/404StarLink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

10.9k 946
opensource security tools

shadowsocks/shadowsocks-rust

A Rust port of shadowsocks

Rust 10.8k 1.4k MIT
http-proxy rust security shadowsocks +3

SigmaHQ/sigma

Main Sigma Rule Repository

Python 10.8k 2.7k NOASSERTION
elasticsearch ids logging monitoring +5

bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Python 10.7k 636 AGPL-3.0
antibot cybersecurity devops devsecops +16

Mail-0/Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

TypeScript 10.7k 1.3k MIT
ai email privacy security

helmetjs/helmet

Help secure Express apps with various HTTP headers

TypeScript 10.7k 410 MIT
helmet http-headers javascript middleware +1

monero-project/monero

Monero: the secure, private, untraceable cryptocurrency

C++ 10.7k 3.5k NOASSERTION
blockchain c-plus-plus cmake cryptocurrency +6

yokoffing/Betterfox

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

JavaScript 10.7k 253 MIT
anti-tracking firefox gecko mozilla +7

trimstray/the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

10.6k 669 MIT
audit centos checklist cis +10

hslatman/awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

10.5k 1.8k Apache-2.0
awesome awesome-list hacktoberfest security

frappe/frappe

Low code web framework for real world applications, in Python and Javascript

Python 10.5k 5.1k MIT
cms email erpnext frappe +12

1N3/Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Shell 10.3k 2.1k NOASSERTION
attack-surface attack-surface-management attacksurface bugbounty-platform +15

veeral-patel/how-to-secure-anything

How to systematically secure anything: a repository about security engineering

10.2k 699
secure-design secure-systems security security-architecture +3

samratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

PowerShell 10.0k 2.5k NOASSERTION
activedirectory hacking infosec nishang +5

quasar/Quasar

Remote Administration Tool for Windows

C# 9.9k 2.6k MIT
administration c-sharp dotnet mono +9

upgundecha/howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

JavaScript 9.8k 887 CC0-1.0
alerting chaos-engineering dev-ops devops +16

go-acme/lego

Let's Encrypt/ACME client and library written in Go

Go 9.8k 1.2k MIT
acme acme-client certificate dns +6

OpenCTI-Platform/opencti

Open Cyber Threat Intelligence Platform

TypeScript 9.7k 1.4k NOASSERTION
cti cyber cybersecurity intelligence +3

wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Ruby 9.7k 1.3k NOASSERTION
hacking-tool scan scanner security +4

majd/ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

Go 9.7k 829 MIT
apple appstore cli command-line +13

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

Astro 9.7k 573 CC0-1.0
awesome awesome-list privacy security +2

bregman-arie/devops-resources

DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP

Groovy 9.6k 2.4k
aws bash checklists containers +11

OWASP/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

9.6k 1.6k CC-BY-SA-4.0
application-security appsec best-practices bugbounty +7