Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Repository Index
47,133 repositories indexed
49–72 of 257 · Most stars
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The Leading Security Assessment Framework for Android.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Collaborative forensic timeline analysis
Tool to look for several security related Android application vulnerabilities
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
A self-contained cryptographic library for Python
- cryptography
- security
- python
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
- web-analytics
- monitoring
- django
- python
Safely pass trusted data to untrusted environments and back.
- python
- security
- hmac
- serialization
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
- security
- kinesis
- serverless
- terraform
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A fork and successor of the Sulley Fuzzing Framework