UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
An OpenID Connect reference implementation in Java on the Spring platform.
ARTEX - AI autonomous penetration testing system (English translation)
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Security Tool to Look For Interesting Files in S3 Buckets
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
The repository host gives no description.
BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Automated Red Team Infrastructure deployement using Docker
A modular vulnerability scanner with automatic report generation capabilities.
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Custom & better AppArmor profile generator for Docker containers.
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
A collection of AWS penetration testing junk
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
Protect against malicious open source packages 🤖
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
Simple yet powerful authorization / authentication client library for Python web applications.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.