Repository Index

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

• esp32
• arduino
• firmware
• wifi

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• opa
• policy
• declarative
• json

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes

The recursive internet scanner for hackers. 🧡

• hacking
• neo4j
• osint
• osint-framework

Nikto web server scanner

Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

• authentication
• django
• oauth2
• openid-connect

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

• wordpress
• wpscan
• security
• security-scanner

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Cloud Native Runtime Security

• cncf
• containers
• security
• falco

Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.

• laravel
• opensource
• mit
• docker

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

SSH tarpit that slowly sends an endless banner

Automated ACME SSL certificate generation for nginx-proxy

• nginx-proxy
• letsencrypt
• docker
• ssl

A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.

Common User Passwords Profiler (CUPP)

• wordlist-generator
• wordlist
• dictionary-attack
• password

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns