Security
安全工具与实践
urbanadventurer/WhatWeb
Next generation web scanner
chaifeng/ufw-docker
To fix the Docker and UFW security flaw without disabling iptables
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
microsoft/Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
fulldecent/system-bus-radio
Transmits AM radio on computers without radio transmitting hardware.
superagent-ai/superagent
Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.
AFLplusplus/AFLplusplus
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
infobyte/faraday
Open Source Vulnerability Management Platform
anthropics/defending-code-reference-harness
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
fleetdm/fleet
Open device management
xairy/linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
j3ssie/osmedeus
A Modern Orchestration Engine for Security
OISF/suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
decalage2/awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
cleverhans-lab/cleverhans
An adversarial example library for constructing attacks, building defenses, and benchmarking both
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
yeahhub/Hacking-Security-Ebooks
Top 100 Hacking & Security E-Books (Free Download)
lldap/lldap
Light LDAP implementation
reddelexc/hackerone-reports
Top disclosed reports from HackerOne
bleachbit/bleachbit
BleachBit system cleaner for Windows and Linux
datreeio/datree
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
duo-labs/cloudmapper
CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
bromite/bromite
Bromite is a Chromium fork with ad blocking and privacy enhancements; take back your browser!
google/syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
michenriksen/gitrob
Reconnaissance tool for GitHub organizations
ikarus23/MifareClassicTool
An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.
ahmetb/kubernetes-network-policy-recipes
Example recipes for Kubernetes Network Policies that you can just copy paste