Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
47,133 repositories indexed
1–24 of 29 · Most stars
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
A vulnerability scanner for container images and filesystems
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
A toolset to make a system look as if it was the victim of an APT attack
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
Charm: A Framework for Rapidly Prototyping Cryptosystems
- python
- cryptography
- prototyping
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
High-interaction Honeypot for PLCs and Industrial Control Systems
Open-source eBPF compatibility evidence and CI gate
a NIF for libntru. NTRU is a post quantum cryptography algorithm.
- ntru
- cryptography
- encryption
- lattice-based-crypto