Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Repository Index
47,133 repositories indexed
49–72 of 282 · Most stars
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
PHP Secure Communications Library
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
An Open Source Java Decompiler Gui for Procyon
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
- java
- decompiler
- reverse-engineering
A cross-version Python bytecode decompiler
- decompiler
- python
- bytecode
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Cloud native secrets management for developers - never leave your command line for secrets.
- secrets
- secret-management
- vault
- hashicorp
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics