:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
Repository Index
47,133 repositories indexed
73–96 of 138 · Most stars
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Galah: An LLM-powered web honeypot.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Credentials catching honeypot
- honeypot
- deception
- security
- security-tools
A static analysis tool for security
- php
- static-code-analysis
- security-tools
- vulnerability-scanners
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools
Passive DNS Capture and Monitoring Toolkit
- passivedns
- passive-dns
- dns-server
- dns
Kraken: A multi-platform distributed brute-force password cracking system
- kraken
- kraken-client
- security-tools
- security
Hashcat web interface
- hashcat
- cracking
- analytics
- pentesting
Awesome information for WebSockets security research