Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 25 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
⚙️ NGINX config generator on steroids 💉
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
A cross-platform programmable network tool
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
Scan files or process memory for CobaltStrike beacons and parse their configuration
Best Current Practices regarding secure online communication and configuration of services using cryptography.
- cryptography
- applied-cryptography
- documentation
- best-practices
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Volatility plugin for extracts configuration data of known malware
Discover internet-wide misconfigurations while drinking coffee
- cybersecurity
- scanner
- golang
- osint
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Configuration powertool with `metosin/malli`