Repository Index

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

Passive DNS Capture and Monitoring Toolkit

• passivedns
• passive-dns
• dns-server
• dns

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

• suricata
• parse
• security-tools
• network-security

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

• blue-team
• security-tools
• security-audit

Audit and fix your Mac's security in one command. No agent, no signup, open source.

• cli
• compliance
• endpoint-security
• golang

IMAP or SMTP honeypot written in Golang

• golang
• honeypot
• imap
• security

The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol

• golang
• security-tools