A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Repository Index
47,133 repositories indexed
73–96 of 257 · Most stars
Bleeding edge django template focused on code quality and security.
IAM Least Privilege Policy Generator
Tool to scan for secret files on HTTP servers
- security
- websecurity
A curated list of resources related to Industrial Control System (ICS) security.
- hacktoberfest
- ics
- iiot
- security
Find web directories without bruteforce
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
DOM fuzzer
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
- splunk
- detection
- engineering
- responses
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
- awesome-list
- binary-analysis
- ghidra
- malware-analysis
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
What's in your data? Extract schema, statistics and entities from datasets
- python
- privacy
- pii
- npi
A tool for quickly evaluating IAM permissions in AWS.
- aws
- iam
- python
- botocore
ICS/SCADA honeypot
- honeypot
- scada
- ics
- python
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
ThePhish: an automated phishing email analysis tool
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.