Repository Index

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

• network-security
• selfhosted
• wifi-network
• wifi-security

Securely and anonymously share files, host websites, and chat with friends using the Tor network

• tor
• file-sharing
• onionshare
• onion-service

CTFs as you need them

• ctf
• security
• education
• flask

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

• cowrie
• honeypot
• ssh
• telnet

Dark Web OSINT Tool

• tor
• tor-network
• deepweb
• dark-web

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

• auditing
• security
• ssh

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization

A self-contained cryptographic library for Python

• cryptography
• security
• python

Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.

• web-analytics
• monitoring
• django
• python

Safely pass trusted data to untrusted environments and back.

• python
• security
• hmac
• serialization

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

• security
• kinesis
• serverless
• terraform

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization

Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

• security
• python
• aws
• lambda

Automated Security Testing For REST API's

• security
• restapiautomation
• python
• owasp

Phishing Campaign Toolkit

• king-phisher
• python
• phishing
• security

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime

A fork and successor of the Sulley Fuzzing Framework

• fuzzing
• python
• security

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec

IAM Least Privilege Policy Generator

• aws
• iam
• cloud
• security

Tool to scan for secret files on HTTP servers

• security
• websecurity