Security
安全工具与实践
trimstray/test-your-sysadmin-skills
A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
gravitl/netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
apsdehal/awesome-ctf
A curated list of CTF frameworks, libraries, resources and softwares
chaitin/xray
一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
kubescape/kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
jason5ng32/MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
knownsec/404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
shadowsocks/shadowsocks-rust
A Rust port of shadowsocks
SigmaHQ/sigma
Main Sigma Rule Repository
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Mail-0/Zero
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
helmetjs/helmet
Help secure Express apps with various HTTP headers
monero-project/monero
Monero: the secure, private, untraceable cryptocurrency
yokoffing/Betterfox
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
trimstray/the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
hslatman/awesome-threat-intelligence
A curated list of Awesome Threat Intelligence resources
frappe/frappe
Low code web framework for real world applications, in Python and Javascript
1N3/Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.
veeral-patel/how-to-secure-anything
How to systematically secure anything: a repository about security engineering
samratashok/nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
quasar/Quasar
Remote Administration Tool for Windows
upgundecha/howtheysre
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
go-acme/lego
Let's Encrypt/ACME client and library written in Go
OpenCTI-Platform/opencti
Open Cyber Threat Intelligence Platform
wpscanteam/wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
majd/ipatool
Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
lissy93/awesome-privacy
🦄 A curated list of privacy & security-focused software and services
bregman-arie/devops-resources
DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.