CTFs as you need them
Repository Index
47,133 repositories indexed
217–240 of 966 · Most stars
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
A collection of awesome security hardening guides, tools and other resources
- awesome-list
- security
- security-hardening
- security-tools
A list of interesting payloads, tips and tricks for bug bounty hunters.
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
syzkaller is an unsupervised coverage-guided kernel fuzzer
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
- infosec
- infosec-reference
- reverse-engineering
- hacking
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
- static-analysis
- php
- type-inference
- security-analysis
A curated list of awesome infosec courses and training resources.
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Cameradar hacks its way into RTSP videosurveillance cameras
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
eBPF-based Security Observability and Runtime Enforcement