Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Resources

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

✭ 62

security hacking security-tools pentesting penetration-testing infosec resources bugbounty security-audit security-vulnerability security-testing methodology

Audit scripts

Scripts to gather system configuration information for offline/remote auditing

✭ 55

security-tools security-audit security-hardening

Cornerstone

Linux命令转发记录

✭ 51

security security-tools security-audit keylogger

Pythem

pentest framework

✭ 1,060

python docker proxy hacking network scanner exploit pentest security-audit xss phishing brute-force fuzzer sniffer man-in-the-middle

Hoper

Security tool to trace URL's jumps across the rel links to obtain the last URL

✭ 50

ruby security tool security-audit recon security-scanner redirects

Pytos

A Python SDK for Tufin Orchestration Suite

✭ 49

python security-audit firewall

Holisticinfosec For Webdevelopers Fascicle0

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

✭ 37

security devops hacking book infosec security-audit books agile devsecops security-testing websecurity social-engineering

Repo Security Scanner

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

✭ 977

go golang security security-audit

Wordpress Exploit Framework

A Ruby framework designed to aid in the penetration testing of WordPress systems.

✭ 882

ruby security wordpress security-audit exploits

Golang Tls

Simple Golang HTTPS/TLS Examples

✭ 857

go golang security awesome security-tools tools https http2 security-audit security-scanner openssl security-hardening secure httpclient

S3 Permission Checker

Check read, write permissions on S3 buckets in your account

✭ 18

python aws s3 security-audit aws-s3 audit

Marsnake

System Optimizer and Monitoring, Security Auditing, Vulnerability scanner for Linux, macOS, and UNIX-based systems

✭ 16

python linux macos security-tools security-audit security-hardening vulnerability-detection vulnerability-scanner optimizer

Cs Suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

✭ 815

shell security security-tools azure security-audit gcp

Sn0int

Semi-automatic OSINT framework and package manager

✭ 814

rust lua security pentesting osint security-audit reconnaissance recon location security-scanner bug-bounty intelligence certificate-transparency

Ossa

Open-Source Security Architecture | 开源安全架构

✭ 796

security security-tools security-audit vulnerabilities vulnerability-scanners security-scanner security-vulnerability application-security ids

Dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

✭ 776

powershell penetration-testing security-audit active-directory passwords sam

Vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

✭ 767

python security hacking security-tools penetration-testing scanner bugbounty hacking-tool security-audit ctf-tools oscp offensive-security

Graudit

grep rough audit - source code auditing tool

✭ 747

shell security security-tools security-audit vulnerability-detection source-code

Gourdscanv2

被动式漏洞扫描系统

✭ 740

python security pentesting scanner infosec security-audit

Brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

✭ 6,281

ruby HTML javascript CSS SCSS Haml security rails security-tools static-analysis security-audit vulnerabilities security-vulnerability brakeman

Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

✭ 725

c linux security hacking security-tools pentesting kernel malware pentest hacking-tool security-audit redteam linux-kernel backdoor rootkit

Inql

InQL - A Burp Extension for GraphQL Security Testing

✭ 715

python graphql security-tools security-audit security-scanner burpsuite burp-extensions

Cansina

Web Content Discovery Tool

✭ 709

python pentesting security-audit

Sqliscanner

Automatic SQL injection with Charles and sqlmap api

✭ 674

python security scanner security-audit security-vulnerability

Jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

✭ 645

html docker security framework automation hacking network security-tools scanner pentest hacking-tool security-audit vulnerability-scanners toolbox

Dawnscanner

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

✭ 642

ruby security rails cybersecurity security-audit vulnerabilities sinatra

Habu

Hacking Toolkit

✭ 635

python python3 linux windows hacking networking security-tools pentesting penetration-testing pentest security-audit pentest-tool network-analysis security-testing scapy

Skf Flask

Security Knowledge Framework (SKF) Python Flask / Angular project

✭ 573

html security security-audit security-hardening secure-by-default

Kube Scan

kube-scan: Octarine k8s cluster risk assessment tool

✭ 566

go security kubernetes devops security-tools k8s cloud-native security-audit security-scanner devsecops

Npq

🎖safely* install packages with npm or yarn by auditing them as part of your install process

✭ 513

javascript security npm security-tools command-line-tool package-manager security-audit vulnerabilities

Attacking And Auditing Docker Containers And Kubernetes Clusters

Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters

✭ 509

shell kubernetes pentesting free security-audit training-materials

Klar

Integration of Clair and Docker Registry

✭ 480

go security docker-image security-audit docker-registry

Dradis Ce

Dradis Framework: Colllaboration and reporting for IT Security teams

✭ 443

ruby security pentesting penetration-testing infosec security-audit collaboration

Nfcgate

An NFC research toolkit application for Android

✭ 425

java android security security-audit relay nfc replay

0xsp Mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

✭ 419

pascal windows security-tools mongoose security-audit redteam toolkit agent webapi privilege-escalation

Pwndoc

Pentest Report Generator

✭ 417

javascript security penetration-testing pentest infosec security-audit collaboration vulnerabilities reporting audit

Otseca

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

✭ 416

shell linux security-tools pentesting cybersecurity security-audit system reporting information-gathering dump auditing html-report system-information

Hellraiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

✭ 413

ruby security rails hacking network security-tools scanner hacking-tool security-audit network-analysis vulnerability-scanners nmap cve vulnerability-detection vulnerability-assessment

Archstrike

An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

✭ 401

shell linux security raspberry-pi hacking pentesting tools penetration-testing security-audit repository arch-linux linux-distribution armv7 hackers armv8

Advisory Db

Security advisory database for Rust crates published through crates.io

✭ 396

rust security security-audit vulnerabilities

Fwanalyzer

a tool to analyze filesystem images for security

✭ 382

go android security-tools filesystem security-audit security-automation

Securitymanageframwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

✭ 378

python security pentesting scanner infosec security-audit vulnerability-scanners exploits vulnerability-detection vulnerability-assessment

Apkanalyser

一键提取安卓应用中可能存在的敏感信息。

✭ 378

shell android security-tools security-audit

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

✭ 367

python python3 hack security automation hacking security-tools tools security-audit security-automation python-script hacker

Taipan

Web application vulnerability scanner

✭ 359

security web hacking security-tools hacking-tool security-audit web-application security-scanner security-automation web-security application-security security-testing

Linux kernel cves

Tracking CVEs for the linux Kernel

✭ 357

vue linux security-audit linux-kernel tracker cve security-vulnerability

Badkarma

network reconnaissance toolkit

✭ 353

python python3 hacking penetration-testing security-audit pentest-tool reconnaissance kali-linux information-gathering nmap offensive-security shodan network-security

Enum4linux Ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

✭ 349

python security pentest security-audit enumeration ctf-tools

Super

Secure, Unified, Powerful and Extensible Rust Android Analyzer

✭ 340

rust android linux security macos windows security-tools android-development security-audit apk vulnerabilities security-scanner analyzer security-automation

Ssh Mitm

ssh mitm server for security audits supporting public key authentication, session hijacking and file manipulation

✭ 335

python proxy security-tools ssh security-audit sftp mitm ssh-client ssh-server mitmproxy scp

Tlsfuzzer

SSL and TLS protocol test suite and fuzzer

✭ 335

python automation testing-tools ssl tls robot security-audit test-automation test-framework fuzzer security-vulnerability tls13

61-120 of 187 security-audit projects

‹

›