Security Libraries - Page 4

Semi-automatic OSINT framework and package manager

Rust 1535Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

SSH man-in-the-middle tool

C 1507Updated: 2 y ago License: Proprietary (Proprietary)

A php.ini scanner for best security practices

PHP 1468Updated: 2 y ago License: Permissive (MIT)

BBT - Bug Bounty Tools (examples💡)

Python 1462Updated: 2 y ago License: No License (No License)

Spring Boot samples by Netgloo

Java 1456Updated: 2 y ago License: Permissive (MIT)

Documentation:

JavaScript 1439Updated: 2 y ago License: Permissive (Apache-2.0)

Terminal log analysis tools

Go 1434Updated: 2 y ago License: Permissive (MIT)

Metlo is an open-source API security platform.

TypeScript 1412Updated: 1 y ago License: Permissive (MIT)

pagehelper-spring-boot

Java 1403Updated: 2 y ago License: Permissive (MIT)

Powerful framework for rogue access point attack.

Python 1402Updated: 1 y ago License: Permissive (Apache-2.0)

Automating situational awareness for cloud penetration tests.

Go 1387Updated: 1 y ago License: Permissive (MIT)

AWSGoat : A Damn Vulnerable AWS Infrastructure

PHP 1376Updated: 1 y ago License: Permissive (MIT)

Find, list, and inspect processes from Go (golang).

Go 1362Updated: 2 y ago License: Permissive (MIT)

100+ Spring Boot Articles, Tutorials, Video tutorials, Projects, Guides, Source code examples etc

Java 1351Updated: 1 y ago License: No License (No License)

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Rust 1346Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

:no_entry: offsec batteries included

Python 1329Updated: 2 y ago License: No License (No License)

:key: Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)

Ruby 1329Updated: 2 y ago License: No License (No License)

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Python 1326Updated: 2 y ago License: Permissive (Apache-2.0)

Golang hardware discovery/inspection library

Go 1326Updated: 1 y ago License: Permissive (Apache-2.0)

Microsoft Threat Intelligence Security Tools

Python 1322Updated: 1 y ago License: Proprietary (Proprietary)

Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

Python 1315Updated: 1 y ago License: Permissive (MIT)

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

Python 1313Updated: 1 y ago License: No License (No License)

Versatile resource statistics tool (the real one, not the Red Hat clone)

Python 1310Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

Python 1303Updated: 2 y ago License: Permissive (MIT)

NetRipper - Smart traffic sniffing for penetration testers

PowerShell 1303Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

Java 1301Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Python 1287Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

TypeScript 1283Updated: 2 y ago License: Proprietary (Proprietary)

With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.

Python 1281Updated: 1 y ago License: Permissive (MIT)

A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensitive network connections, etc if a user is coerced into giving a threat actor a password.

C 1281Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

A default credential scanner.

Python 1276Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python 1274Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

A simple utility to remove unused resources in your Android app to lower the size of the APK. It's based on the Android lint tool output.

Python 1273Updated: 2 y ago License: Permissive (Apache-2.0)

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Python 1267Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

Java 1260Updated: 2 y ago License: No License (No License)

The iOS Security Testing Framework

Python 1258Updated: 1 y ago License: Proprietary (Proprietary)

[Suspended] FakeNet-NG - Next Generation Dynamic Network Analysis Tool

Python 1251Updated: 3 y ago License: Permissive (Apache-2.0)

grep rough audit - source code auditing tool

Shell 1226Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

从零入门 ！Spring Security With JWT（含权限验证）后端部分代码。

Java 1223Updated: 1 y ago License: No License (No License)

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Python 1222Updated: 1 y ago License: Strong Copyleft (AGPL-3.0)

PacBot (Policy as Code Bot)

Java 1217Updated: 2 y ago License: Permissive (Apache-2.0)

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

HTML 1217Updated: 1 y ago License: Permissive (Apache-2.0)

LibreSSL Portable itself. This includes the build scaffold and compatibility layer that builds portable LibreSSL from the OpenBSD source code. Pull requests or patches sent to tech@openbsd.org are welcome.

C 1213Updated: 1 y ago License: No License (No License)

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Python 1205Updated: 1 y ago License: Permissive (Apache-2.0)

Distributed & real time digital forensics at the speed of the cloud

Go 1198Updated: 2 y ago License: Weak Copyleft (MPL-2.0)

No-root network monitor, firewall and PCAP dumper for Android

Java 1189Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Android certificate pinning disable tools

JavaScript 1172Updated: 1 y ago License: No License (No License)

A suite of tools to assist with reviewing Open Source Software dependencies.

Kotlin 1165Updated: 1 y ago License: Permissive (Apache-2.0)

Resources related to GitHub Security Lab

C 1160Updated: 1 y ago License: Permissive (MIT)

Web and mobile application security training platform

Java 1158Updated: 1 y ago License: Strong Copyleft (GPL-3.0)