A pure Unix shell script ACME client for SSL / TLS certificate automation
- acme
- acme-protocol
- certbot
- shell
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
Automated ACME SSL certificate generation for nginx-proxy
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
Automated Encryption Framework
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Scalpel is an open source data carving tool. It is not being actively maintained.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
A Suricata Docker image.
- suricata
- ids
- nsm
- docker
Script for automating Linux memory capture and analysis
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Custom password cracking rules for Hashcat and John the Ripper
- password-cracking
- hashcat
- johntheripper
- jtr
Bash and Python Honeyport scripts
autocrack adds queue support for hashcat cracking.