OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Repository Index
47,133 repositories indexed
241–264 of 966 · Most stars
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
🚗 A curated list of resources for learning about vehicle security and car hacking.
- vehicle-security
- car-hacking
- hacking-vehicles
- security
Linux Runtime Security and Forensics using eBPF
The Leading Security Assessment Framework for Android.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
Privacy and Security focused Segment-alternative, in Golang and React
- privacy
- warehouse-management
- data-warehouse
- customer-data
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A collected list of awesome security talks
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.
- keychain
- touch-id
- face-id
- security
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
An experiment.
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
- coraza
- waf
- coraza-waf
- owasp-crs