Security Libraries - Page 2

Hunt for security weaknesses in Kubernetes clusters

Python 4287Updated: 1 y ago License: Permissive (Apache-2.0)

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Shell 4215Updated: 3 y ago License: Strong Copyleft (CC-BY-SA-4.0)

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Go 4078Updated: 1 y ago License: Permissive (Apache-2.0)

Automatically install all Kali linux tools

Python 4059Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

HTML 4053Updated: 2 y ago License: Proprietary (Proprietary)

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

C# 4052Updated: 2 y ago License: Permissive (MIT)

Scanning APK file for URIs, endpoints & secrets.

Python 3977Updated: 1 y ago License: Permissive (Apache-2.0)

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Python 3960Updated: 1 y ago License: Permissive (Apache-2.0)

WiFi security auditing tools suite

C 3949Updated: 1 y ago License: Strong Copyleft (GPL-2.0)

Snyk CLI scans and monitors your projects for security vulnerabilities.

TypeScript 3821Updated: 3 y ago License: Proprietary (Proprietary)

Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

Go 3769Updated: 1 y ago License: Permissive (Apache-2.0)

Monitor linux processes without root permissions

Go 3753Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD

Shell 3660Updated: 2 y ago License: No License (No License)

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

JavaScript 3641Updated: 2 y ago License: Permissive (MIT)

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

Python 3521Updated: 1 y ago License: Permissive (MIT)

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Python 3420Updated: 2 y ago License: Permissive (BSD-3-Clause)

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

HTML 3418Updated: 1 y ago License: Permissive (MIT)

Web Application Security Scanner Framework

Ruby 3376Updated: 1 y ago License: Proprietary (Proprietary)

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Shell 3362Updated: 1 y ago License: Permissive (MIT)

Cameradar hacks its way into RTSP videosurveillance cameras

Go 3358Updated: 1 y ago License: Permissive (MIT)

Generic Signature Format for SIEM Systems

Python 3277Updated: 4 y ago License: No License (No License)

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

Shell 3229Updated: 1 y ago License: Permissive (MIT)

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

HTML 3148Updated: 1 y ago License: No License (No License)

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

Shell 3075Updated: 1 y ago License: No License (No License)

An enterprise friendly way of detecting and preventing secrets in code.

Python 3073Updated: 1 y ago License: Permissive (Apache-2.0)

The Leading Security Assessment Framework for Android.

Python 3071Updated: 1 y ago License: Proprietary (Proprietary)

cSploit - The most complete and advanced IT security professional toolkit on Android.

Java 3046Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Manages application of security headers with many safe defaults

Ruby 3040Updated: 2 y ago License: Permissive (MIT)

Source Code Security Audit (源代码安全审计)

Python 3024Updated: 1 y ago License: Permissive (MIT)

Tool to look for several security related Android application vulnerabilities

Python 2988Updated: 1 y ago License: Proprietary (Proprietary)

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Go 2922Updated: 3 y ago License: Permissive (Apache-2.0)

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Scala 2916Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Go 2881Updated: 1 y ago License: Permissive (MIT)

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Python 2796Updated: 1 y ago License: Strong Copyleft (AGPL-3.0)

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

TypeScript 2720Updated: 2 y ago License: Permissive (MIT)

Network Analysis Tool

C# 2708Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Source Code Security Audit (源代码安全审计)

Python 2699Updated: 3 y ago License: Permissive (MIT)

InSpec: Auditing and Testing Framework

Ruby 2686Updated: 1 y ago License: Proprietary (Proprietary)

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Go 2642Updated: 1 y ago License: Permissive (MIT)

Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results

Ruby 2624Updated: 3 y ago License: Permissive (Apache-2.0)

Cloud Security Posture Management (CSPM)

JavaScript 2616Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

The Leading Security Assessment Framework for Android.

Python 2609Updated: 3 y ago License: Proprietary (Proprietary)

user.js -- Firefox configuration hardening

JavaScript 2559Updated: 2 y ago License: Permissive (MIT)

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

C# 2558Updated: 1 y ago License: Permissive (MIT)

Patch-level verification for Bundler

Ruby 2531Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

a drop-in replacement for Nmap powered by shodan.io

Go 2470Updated: 1 y ago License: Strong Copyleft (AGPL-3.0)

一个能让你了解所有函数调用顺序以及函数耗时的Android库（无需侵入式代码）

Java 2455Updated: 3 y ago License: No License (No License)

Real-time HTTP Intrusion Detection

Go 2446Updated: 1 y ago License: Permissive (Apache-2.0)

Automated NoSQL database enumeration and web application exploitation tool.

Python 2414Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

Shell 2385Updated: 1 y ago License: Strong Copyleft (GPL-3.0)