All Categories → Security → security-audit

Top 187 security-audit open source projects

Nginx日志安全分析脚本

✭ 250

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

✭ 251

python security hacking pentesting security-audit backdoor post-exploitation reverse-shell

Cobra

Source Code Security Audit (源代码安全审计)

✭ 2,802

python CSS HTML javascript java PHP security-tools security-audit security-scanner cobra sourcecode-analysis code-audit

Filewatcher

A simple auditing utility for macOS

✭ 233

c macos monitoring malware filesystem security-audit auditing

Bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

✭ 2,518

security proxy tls security-audit mitm man-in-the-middle ettercap spoofing sslstrip bettercap

Kubestriker

A Blazing fast Security Auditing tool for Kubernetes

✭ 213

python docker security kubernetes aws automation devops containers security-tools azure infosec security-audit

Sec Admin

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

✭ 222

python security scanner infosec security-audit vulnerability-scanners exploits

Roslyn Security Guard

Roslyn analyzers that aim to help security audit on .NET applications.

✭ 214

visual-studio security-audit code-analysis roslyn

G Scout

Google Cloud Platform Security Tool

✭ 210

python security-audit gcp

Whispers

Identify hardcoded secrets and dangerous behaviours

✭ 66

python security parser linter parsing pipeline security-audit lint static-code-analysis secrets passwords devsecops

Bundler Audit

Patch-level verification for Bundler

✭ 2,393

ruby security security-tools security-audit bundler-audit patch-management dependency-checker ruby-advisory-db

Replica

Ghidra Analysis Enhancer 🐉

✭ 194

python automation reverse-engineering security-tools analysis security-audit malware-analysis binary disassembler decompiler binary-analysis disassembly

Opencspm

Open Cloud Security Posture Management Engine

✭ 191

ruby security kubernetes aws cloud security-audit gcp

Sbt Dependency Check

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

✭ 187

scala security devops static-analysis infosec security-audit vulnerabilities vulnerability-scanners sbt owasp security-automation cve devsecops sbt-plugin appsec

Biu Framework

Biu-framework🚀 Security Scan Framework For Enterprise Intranet Based Services(企业内网基础服务安全扫描框架)

✭ 183

python security scanner security-audit scan vulnerability-scanner

Crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

✭ 182

security makefile hacking security-tools pentesting penetration-testing infosec bugbounty hacking-tool security-audit enumeration offensive-security security-vulnerability

Yawast

YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications

✭ 181

python security ssl tls security-audit security-scanner appsec

Nndefaccts

nnposter's alternate fingerprint dataset for Nmap script http-default-accounts

✭ 180

lua penetration-testing security-audit nmap

Awesome Security Audits

A collection of public security audits.

✭ 175

go golang security awesome awesome-list security-audit

Anteater

Anteater - CI/CD Gate Check Framework

✭ 174

python devops developer-tools malware security-audit travis-ci devops-tools circleci scanning regexp

Recsech

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

✭ 173

security-tools tools dns penetration-testing scanner research hacking-tool security-audit reconnaissance recon security-vulnerability websecurity

Terraform Aws Cloudtrail Cloudwatch Alarms

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

✭ 170

devops terraform hcl slack security-audit alarm

Zap Cli

A simple tool for interacting with OWASP ZAP from the commandline.

✭ 166

python security pentesting penetration-testing security-audit owasp

Dirsearch

A Go implementation of dirsearch.

✭ 164

go security-tools security-audit information-gathering enumeration bruteforce wordlist

Striptls

proxy poc implementation of STARTTLS stripping attacks

✭ 163

python security tls security-audit mitm man-in-the-middle

Minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

✭ 162

python bitcoin hacking cryptocurrency security-tools penetration-testing bugbounty hacking-tool security-audit security-scanner burpsuite web-security blacklist burp-extensions burp-plugin

Hardentheworld

Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.

✭ 158

python security hacking security-audit security-hardening hardening sysadmin secure-by-default

Nebulousad

NebulousAD automated credential auditing tool.

✭ 158

python security security-tools security-audit security-automation

Git Scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

✭ 157

shell bash pentesting security-audit pentest-tool

Ssti Payloads

🎯 Server Side Template Injection Payloads

✭ 150

security web bugbounty code security-audit injection payload source websecurity payloads

Libdiffuzz

Custom memory allocator that helps discover reads from uninitialized memory

✭ 147

rust security security-tools fuzzing security-audit security-testing fuzz-testing

Mix audit

🕵️‍♀️ MixAudit provides a mix deps.audit task to scan a project Mix dependencies for known Elixir security vulnerabilities

✭ 146

elixir security security-audit

Gcp Audit

A tool for auditing security properties of GCP projects.

✭ 140

python security security-audit google-cloud google-cloud-platform

Sqlite Lab

This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/

✭ 140

pentesting security-audit sql-injection

Wordpress Scanner

Wordpress Vulnerability Scanner

✭ 137

wordpress security-audit vulnerability auditing

Edr Testing Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

✭ 136

security security-audit incident-response

Minimalistic Offensive Security Tools

A repository of tools for pentesting of restricted and isolated environments.

✭ 135

powershell windows penetration-testing security-audit brute-force security-automation active-directory port-scanner

Reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

Find Sec Bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

✭ 1,748

java kotlin HTML groovy CSS XSLT hacktoberfest security static-analysis security-audit owasp code-analysis findbugs taint-analysis cwe

Windows Ad Environment Related

This Repository contains the stuff related to windows Active directory environment exploitation

✭ 123

powershell security-audit exploitation activedirectory

Horn3t

Powerful Visual Subdomain Enumeration at the Click of a Mouse

✭ 120

python security-tools pentesting penetration-testing selenium security-audit enumeration selenium-webdriver websecurity subdomain-scanner

Sippts

Set of tools to audit SIP based VoIP Systems

✭ 116

perl hacking security-tools pentesting pentest hacking-tool security-audit pentest-tool voip sip asterisk

Encrypt.to

Send encrypted PGP messages with one click

✭ 116

ruby security encryption email security-audit pgp openpgp gnupg

Wynis

Audit Windows Security with best Practice

✭ 116

powershell windows security-audit

Dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

✭ 1,713

go Dockerfile docker security kubernetes containers security-tools linter security-audit vulnerability

Kccss

Kubernetes Common Configuration Scoring System

✭ 111

typescript security kubernetes cloud-native security-audit devsecops

Catnip

Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux

✭ 108

shell security-tools pentest security-audit pentest-tool kali-linux kali

Gda Android Reversing Tool

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, dat…

✭ 2,332

java python Batchfile security-audit malware-analysis vulnerability-scanners decompiler privacy-protection mobile-security

Drek

A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.

✭ 103

html security-audit static-code-analysis information-security

Vsaudit

VOIP Security Audit Framework

✭ 97

ruby security security-tools penetration-testing security-audit voip sip

Cloudsploit

Cloud Security Posture Management (CSPM)

✭ 1,338

javascript security aws cloud azure security-audit gcp oracle oci

Github Dorks

Find leaked secrets via github search