Trending repositories for topic security
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
A collection of various awesome lists for hackers, pentesters and security researchers
Firefox user.js for speed, privacy, and security. Your favorite browser, but better.
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
serve as a reverse proxy to protect your web services from attacks and exploits.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Automation to assess the state of your M365 tenant against CISA's baselines
SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Wi...
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Wi...
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
💫 Nebula: An open-source secret management solution secure, scalable, and flexible handling of secret across multiple domains.
Curated list of tools, techniques and resources related to Apple Security (macOS, iOS, iPadOS, tvOS, watchOS) aimed to help people with an interest in Apple related security topics to get a hold in th...
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential security vulnerabilities in their LLM APIs.
Run a security scan on your server and identify common gaps. Get your VPS ready for production.
SiteOne Crawler GUI is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Support...
👓A collection of papers/tools/exploits for UEFI security.
Automation to assess the state of your M365 tenant against CISA's baselines
Fluere is a powerful and versatile tool designed for network monitoring and analysis. It is capable of capturing network packets in pcap format and converting them into NetFlow data, providing a compr...
Helps you build better AI agents through debuggable unit testing
Anonymous automation with fingerprint replacement technology.
This project aims to consolidate and share high-quality resources and tools across the cybersecurity domain.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
A collection of various awesome lists for hackers, pentesters and security researchers
Firefox user.js for speed, privacy, and security. Your favorite browser, but better.
☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
Run a security scan on your server and identify common gaps. Get your VPS ready for production.
serve as a reverse proxy to protect your web services from attacks and exploits.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Wi...
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents
A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Run a security scan on your server and identify common gaps. Get your VPS ready for production.
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
SiteOne Crawler GUI is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Support...
A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential security vulnerabilities in their LLM APIs.
SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Wi...
💫 Nebula: An open-source secret management solution secure, scalable, and flexible handling of secret across multiple domains.
Roadmap to get up to speed with CosmWasm smart contract audits and security vulnerabilities
An open source database of disallowed usernames for software projects to prevent phishing and impersonation.
reNgine-ng is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous ...
Curated list of tools, techniques and resources related to Apple Security (macOS, iOS, iPadOS, tvOS, watchOS) aimed to help people with an interest in Apple related security topics to get a hold in th...
Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.
A plugin manager for the asdf version manager
Helps you build better AI agents through debuggable unit testing
Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Run a security scan on your server and identify common gaps. Get your VPS ready for production.
Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential security vulnerabilities in their LLM APIs.
oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
serve as a reverse proxy to protect your web services from attacks and exploits.
A collection of various awesome lists for hackers, pentesters and security researchers
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
🛡️ Open-source and next-generation Web Application Firewall (WAF)
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Firefox user.js for speed, privacy, and security. Your favorite browser, but better.
♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the int...
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
💫 Nebula: An open-source secret management solution secure, scalable, and flexible handling of secret across multiple domains.
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
Exposor is a tool using internet search engines to detect exposed technologies with a unified syntax.
Run a security scan on your server and identify common gaps. Get your VPS ready for production.
oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
SiteOne Crawler GUI is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Support...
一个网络安全法律法规、安全政策、国家标准、行业标准知识库。A knowledge base of cybersecurity laws and regulations, security policies, national standards, and industry standards.
SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhe...
Permguard is an Open Source Multi-Account, Multi-Tenant, Zero-Trust Auth* Provider.
A Completely Modular LLM Reverse Engineering, Red Teaming, and Vulnerability Research Framework.
openai-captcha-detection 是一个使用 OpenAI 进行验证码识别的工具。目前验证码识别准确率100%，通过调用 OpenAI 的 API，这个项目可以实现对复杂验证码图片的文本识别，帮助开发者在验证码处理场景中进行自动化操作。
portchecker.io is a free online utility to check the port status of a given hostname or IP address.
SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Wi...
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
The open source Tines / Splunk SOAR alternative for security engineers.
ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
A reading list for large models safety, security, and privacy (including Awesome LLM Security, Safety, etc.).
The successor to xp-AntiSpy, designed for the modern Windows experience
Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现（已有14wPOC，已校验有效性并去重）
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educatio...
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
A collection of various awesome lists for hackers, pentesters and security researchers
Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore:...
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
serve as a reverse proxy to protect your web services from attacks and exploits.
♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the int...
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
AI Native Data App Development framework with AWEL(Agentic Workflow Expression Language) and Agents
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
The open source Tines / Splunk SOAR alternative for security engineers.
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
A very small, very simple, yet very secure encryption tool.
A reading list for large models safety, security, and privacy (including Awesome LLM Security, Safety, etc.).
The successor to xp-AntiSpy, designed for the modern Windows experience
Privacy-first, end-to-end encrypted Mail, Pages, Drive, and Calendar.
BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research...
Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.
Hoop.dev is an open-source access gateway that provides secure, seamless, and audited access to databases and infrastructure without exposing credentials or sensitive data.
PostgreSQL database anonymization and synthetic data generation tool
Copy links from the sharing menu with automatic removal of shorteners and trackers
Athena OS Nix configuration files focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!