47,133 repositories indexed
25–48 of 282 · Most stars
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Prevents you from committing secrets and credentials into git repositories
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Free cross-platform password manager compatible with KeePass
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Adversary Emulation Framework
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Sandbox for developing and testing UI components in isolation
RetDec is a retargetable machine-code decompiler based on LLVM.
Automated ACME SSL certificate generation for nginx-proxy
The modern Java bytecode editor
Common User Passwords Profiler (CUPP)
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources