Security

安全工具与实践

urbanadventurer/WhatWeb

Next generation web scanner

Ruby 6.7k 1.0k GPL-2.0
application-security appsec hacking hacking-tools +16

chaifeng/ufw-docker

To fix the Docker and UFW security flaw without disabling iptables

Shell 6.7k 498 GPL-3.0
debian docker docker-swarm firewall +4

S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

6.7k 1.3k MIT
active-directory active-directory-cheatsheet active-directory-exploitation activedirectory +16

microsoft/Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

HTML 6.7k 908 CC0-1.0
appsec cia-triad data-protection data-security +7

fulldecent/system-bus-radio

Transmits AM radio on computers without radio transmitting hardware.

C 6.7k 402 MIT
airgap communication communication-protocol electrical-engineering +11

superagent-ai/superagent

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

TypeScript 6.7k 967 MIT
ai anthropic guardrails llm +3

AFLplusplus/AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

C 6.7k 1.3k AGPL-3.0
afl afl-compiler afl-fuzz afl-fuzzer +11

infobyte/faraday

Open Source Vulnerability Management Platform

Python 6.7k 1.1k GPL-3.0
appsec burpsuite collaboration continuous-scanning +16

anthropics/defending-code-reference-harness

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

Python 6.6k 538 NOASSERTION
security

lwthiker/curl-impersonate

curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

Python 6.6k 527 MIT
curl https security ssl +1

fleetdm/fleet

Open device management

Go 6.6k 945 NOASSERTION
binary-authorization configuration-management device-management gitops +14

xairy/linux-kernel-exploitation

A collection of links related to Linux kernel security and exploitation

6.6k 1.1k CC-BY-4.0
exploit kernel-exploitation linux-kernel privilege-escalation +1

EdOverflow/bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

6.5k 1.6k CC-BY-SA-4.0
bugbounty infosec payloads security

j3ssie/osmedeus

A Modern Orchestration Engine for Security

Go 6.5k 1.0k MIT
agentic-ai attack-surface-management bugbounty go +11

OISF/suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

C 6.5k 1.7k GPL-2.0
cybersecurity ids intrusion-detection-system intrusion-prevention-system +7

cowrie/cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Python 6.5k 1.0k NOASSERTION
attacker cowrie cowrie-ssh deception +12

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

6.5k 676
awesome-list best-practices blue-team blueteam +10

cleverhans-lab/cleverhans

An adversarial example library for constructing attacks, building defenses, and benchmarking both

Jupyter Notebook 6.4k 1.4k MIT
benchmarking machine-learning security

MISP/MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

PHP 6.4k 1.6k AGPL-3.0
cti cybersecurity fraud-detection fraud-management +16

yeahhub/Hacking-Security-Ebooks

Top 100 Hacking & Security E-Books (Free Download)

6.4k 1.2k
books ebooks hacking hacking-security-ebooks +3

lldap/lldap

Light LDAP implementation

Rust 6.4k 344 GPL-3.0
authentication ldap opaque rust +3

reddelexc/hackerone-reports

Top disclosed reports from HackerOne

Python 6.4k 1.1k
bugbounty csrf hackerone idor +8

bleachbit/bleachbit

BleachBit system cleaner for Windows and Linux

Python 6.4k 425 GPL-3.0
antiforensics bleachbit ccleaner-alternative disk-cleaner +7

datreeio/datree

Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io

Go 6.3k 357 Apache-2.0
admission-webhook best-practices cli datree +7

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

JavaScript 6.3k 834 BSD-3-Clause
aws cytoscape diagram security

bromite/bromite

Bromite is a Chromium fork with ad blocking and privacy enhancements; take back your browser!

6.3k 598 GPL-3.0
adblock adblocking android bromite +4

google/syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

Go 6.3k 1.4k Apache-2.0
fuzz-testing fuzzer fuzzing kernel +5

michenriksen/gitrob

Reconnaissance tool for GitHub organizations

Go 6.2k 844 MIT
github-api golang osint security

ikarus23/MifareClassicTool

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.

Java 6.2k 1.0k GPL-3.0
android android-nfc mifare mifare-classic +4

ahmetb/kubernetes-network-policy-recipes

Example recipes for Kubernetes Network Policies that you can just copy paste

6.1k 1.8k Apache-2.0
kubernetes networking security