Security

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

This is a multi-use bash script for Linux systems to audit wireless networks.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

Multi-Cloud Security Auditing Tool

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Cyber Security ALL-IN-ONE Platform

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

A guide to smart contract security best practices

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

WiFi security auditing tools suite

⚠️ Browser fingerprinting via favicon!

Cloud native networking and network security

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

A static analysis security vulnerability scanner for Ruby on Rails applications

Performant type-checking for python.

A list of web application security

Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.

The slightly more awesome standard unix password manager for teams

Securely and anonymously share files, host websites, and chat with friends using the Tor network

Tfsec is now part of Trivy

A curated list of resources for learning about application security

🧱 easy, fast and local-first microVM runtime

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

All about bug bounty (bypasses, payloads, and etc)

Ultimate DevSecOps library

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

CTFs as you need them

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.