An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Set up a personal VPN in the cloud
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Bluetooth experimentation framework for Broadcom and Cypress chips.
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
Free Course : Data, Machine Learning, Deep Learning and AI Engineering, the long way round: the math, the code, the systems and the security. 173 lessons, 166 runnable labs, no shortcuts. Free under CC BY-NC 4.0.
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Code for the experiment proposed in Section 4.2 of the paper "The Bouncer Problem: Challenges to Remote Explainability".