This is a step-by-step guide to implementing a DevSecOps program for any size organization
Repository Index
73,362 visible repositories in the index
169–192 of 313 · Most stars
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
- llm-guardrails
- llm-security
- llm-jailbreaks
- llm-scanner
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
- password-cracking
- machine-learning
- deep-learning
- gan
A curated list for Awesome Kubernetes Security resources
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
A network sniffer that logs all DNS server replies for use in a passive DNS setup
detect stegano-hidden data in PNG & BMP
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
The repository host gives no description.
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
- ddd
- extension
- ddd-architecture
- clean-architecture
A Game of Hackers (CTF Scoreboard & Game Manager)
Protect against malicious open source packages 🤖
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
The repository host gives no description.
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
- steam
- steamguard-cli
- linux-utility
- sda
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Audited & minimal JS implementation of hash functions, MACs and KDFs.
- cryptography
- hash
- kdf
- hashing
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence