Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
- yubikey
- gpg
- gnupg
- ssh
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
- cve-scanner
- mcp-server
- mcp-tools
- osv
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
🔪Browser logic vulnerabilities :skull_and_crossbones:
- security
- browser
- xss
- vulnerability
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
WebAppSec Content Security Policy
Apache Logfile Security Analyzer
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
TranslatedA guide to avoiding scams in the human world: 373 scam breakdowns covering 16 categories, including fake-order task scams (刷单), pig-butchering scams (杀猪盘), AI face-swapping, and scams targeting the elderly; includes real case reports, everyday self-check lists, PDF/EPUB/Anki downloads, and a scam-avoidance mini-game with 12 rounds
- anti-fraud
- anti-scam
- chinese
- scam-awareness
Curated list of Cyber Security acronyms & abbreviations
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
The plugin repository for Honeycomb, the honeypot framework by Cymmetria
- honeycomb
- security
- security-tools
- python
A multi-purpose, modular medium-interaction honeypot based on Twisted.
- honeypot
- cybersecurity
- twisted
- broker