The Guard component brings many layers of authentication together, making it much easier to create complex authentication systems where you have total control.

✭ 1,157

security component symfony symfony-component

Exploits

Miscellaneous exploit code

✭ 1,157

python security windows hacking poc exploits bypass rce

Bleachbit

BleachBit system cleaner for Windows and Linux

✭ 1,151

python linux security windows privacy gtk gplv3

Pgen

Command-line passphrase generator

✭ 68

rust security security-tools password commandline random password-generator

Cloud Security Audit

A command line security audit tool for Amazon Web Services

✭ 68

go golang security aws command-line cloud tool s3 security-audit amazon-web-services ec2

Pillager

Pillage filesystems for sensitive information with Go.

✭ 64

go security cli hacking scanner

Ziggurat foundations

Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.

✭ 67

python security flask authentication authorization sqlalchemy permissions permission mixins pyramid

Ais

Toolkit for research purposes in AIS. See the website for the paper.

✭ 67

python security sdr

Diceware

Generate secure passwords you can actually remember!

✭ 66

javascript security web bootstrap password password-generator

Awsenv

awsenv is intended as a local credential store for people using more than one AWS account at the same time

✭ 67

go security aws credentials

Keychains

🔑 A keychain wrapper that is so easy to use that your cat could use it.

✭ 67

swift security password service keychain

Solved Hacking Problem

✔️ CTF problems and solutions solved by Qwaz

✭ 67

c security hacking ctf

Module Security Public

The public documentation for the gruntwork-io/module-security repo, which contains packages for setting up best practices for managing secrets, credentials, and servers

✭ 67

go security aws documentation devops terraform ssh iam

Nim Httpauth

HTTP Authentication library for Nim

✭ 67

nim security http authentication authorization

Hubcommander

A Slack bot for GitHub organization management -- and other things too

✭ 1,149

python security github bot slack travis-ci slack-bot chatops

Security Http

Security provides an infrastructure for sophisticated authorization systems, which makes it possible to easily separate the actual authorization logic from so called user providers that hold the users credentials. It is inspired by the Java Spring framework.

✭ 1,146

security http component symfony symfony-component

Gke Network Policy Demo

This guide demonstrates how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to network communication. You will provision a simple HTTP server and two client pods in a Kubernetes Engine cluster, then use a Network Policy restrict connections from client pods.

✭ 66

shell security kubernetes networking

Mailpile

A free & open modern, fast email client with user-friendly encryption and privacy features

✭ 8,533

python javascript HTML CSS Less shell security search-engine tags pgp smtp-client imap-client e-mail

Vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

✭ 8,844

go linux security security-tools cybersecurity security-audit freebsd vulnerabilities vulnerability-scanners security-scanner security-automation security-hardening vulnerability-detection security-vulnerability vulnerability-assessment vulnerability-scanner vulnerability-management administrator vuls

Zaproxy

The OWASP ZAP core project

✭ 9,078

java HTML python kotlin javascript shell hacktoberfest security security-scanner owasp appsec zap owasp-zap dast zaproxy zap-development

Sudo rails

🔒 Sudo mode for your Rails controllers

✭ 66

ruby security rails rails-engine sudo

Gglsbl Rest

Dockerized REST service to look up URLs in Google Safe Browsing v4 API

✭ 65

shell security

Go Out

☄️ go-out - A Golang egress buster.

✭ 65

go security network scanner

Inspec tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

✭ 65

ruby security json converter compliance checklist

Cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

✭ 1,136

python security hacking security-tools cryptography privacy pentesting pentest infosec hacking-tool pentest-tool red-team steganography cipher

Nosurf

CSRF protection middleware for Go.

✭ 1,131

go security middleware csrf

Go Tpm Tools

Go packages built on go-tpm providing a high-level API for using TPMs

✭ 64

c golang security

Kube Score

Kubernetes object analysis with recommendations for improved reliability and security

✭ 1,128

go security kubernetes automation ci linter analysis charts helm static-code-analysis security-scanner kubernetes-monitoring

Terraform Security Scan

Run a security scan on your terraform with the very nice https://github.com/liamg/tfsec

✭ 64

shell hacktoberfest security aws terraform azure static-analysis ci scanner google-cloud-platform compliance

Chef Vault

chef-vault cookbook

✭ 63

ruby hacktoberfest security encryption chef cookbook

Nginx omniauth adapter

Use omniauth for nginx auth_request

✭ 63

ruby security nginx authentication rack

Go Msgauth

A Go library for DKIM, DMARC and Authentication-Results

✭ 63

go security mail auth

Disable Webassembly

Browser hacks to disable WebAssembly (WASM)

✭ 63

security chrome webassembly firefox wasm edge security-hardening

Binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

✭ 1,125

python security aws serverless terraform lambda yara malware-detection

Fhe Toolkit Linux

IBM Fully Homomorphic Encryption Toolkit For Linux. This toolkit is a Linux based Docker container that demonstrates computing on encrypted data without decrypting it! The toolkit ships with two demos including a fully encrypted Machine Learning inference with a Neural Network and a Privacy-Preserving key-value search.

✭ 1,123

security security-tools cryptography encryption crypto research ibm

Attack Surface Detector Burp

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

✭ 63

java security pentesting vulnerability

Chimay Red

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

✭ 63

python security hacking reverse-engineering exploit debugging security-vulnerability

Owasp Seraphimdroid

OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.

✭ 62

java machine-learning security privacy android-application owasp malware-research malware-detection

Nixarmor

nixarmor is a linux hardening automation project

✭ 62

shell linux security hardening

Needle

The iOS Security Testing Framework

✭ 1,122

python ios security mobile pentesting

X Springboot

X-SpringBoot是一个轻量级的Java快速开发平台，能快速开发项目并交付【接私活利器】

✭ 1,117

java security redis spring-boot swagger restful spring-mvc minio

Gpgit

A shell script that automates the process of signing Git sources via GPG

✭ 62

python security git signature gpg

Resources

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

✭ 62