StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

✭ 2,634

python HCL shell security aws serverless terraform lambda analysis rules kinesis

Call For Wpa3

Call for WPA3 - what's wrong with WPA2 security and how to fix it

✭ 227

security

Containerise

Firefox extension to automatically open websites in a container

✭ 224

javascript security privacy firefox firefox-extension

Two Factor Auth

Two Factor Authentication Java code implementing the Time-based One-time Password Algorithm

✭ 225

java security password totp

Armadillo

A shared preference implementation for confidential data in Android. Per default uses AES-GCM, BCrypt and HKDF as cryptographic primitives. Uses the concept of device fingerprinting combined with optional user provided passwords and strong password hashes.

✭ 226

java android security cryptography crypto sharedpreferences bcrypt aes-encryption

Csp

The source for this module has moved to the Helmet repository.

✭ 225

javascript security csp headers

Drozer

The Leading Security Assessment Framework for Android.

✭ 2,683

python java HTML c Batchfile Makefile android security mobile pentesting drozer mwr

Dumb Password Rules

Shaming sites with dumb password rules.

✭ 2,635

hacktoberfest security passwords

Androtickler

Penetration testing and auditing toolkit for Android apps.

✭ 225

java android security pentesting auditing

Lockwise Ios

Firefox's Lockwise app for iOS

✭ 224

swift ios security firefox rxswift passwords mozilla

H1domains

HackerOne "in scope" domains

✭ 223

python security security-tools security-automation security-vulnerability

Sec Admin

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

✭ 222

python security scanner infosec security-audit vulnerability-scanners exploits

Spamscope

Fast Advanced Spam Analysis Tool

✭ 223

python docker security ansible docker-image smtp application-security outlook ansible-playbook

Antivirtualapp

检测当前app是否运行在VirtualApp虚拟机中

✭ 222

android security

Honggfuzz Rs

Fuzz your Rust code with Google-developed Honggfuzz !

✭ 222

rust security security-tools fuzzing fuzzer crates security-testing fuzz-testing

Pot

Phishing on Twitter

✭ 223

python security phishing social-engineering

Honeybits

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots

✭ 222

go golang security honeypot breadcrumbs

Dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

✭ 221

go security dns bugbounty subdomain

Pentest Wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

✭ 2,668

python groovy security hacking pentest

Tfsec

Security scanner for your Terraform code

✭ 3,622

go hacktoberfest security aws terraform azure static-analysis ci scanner infrastructure-as-code google-cloud-platform compliance digitalocean vulnerability-scanners devsecops misconfiguration

Kubernetes Security Best Practice

Kubernetes Security - Best Practice Guide

✭ 2,540

security kubernetes guide best-practices best-practice

Sslyze

Fast and powerful SSL/TLS scanning library.

✭ 2,623

python Dockerfile security library ssl tls scans tls13 ssllabs sslyze heartbleed tls-scanning-library

Passbolt api

Passbolt CE Backend, a JSON API written with Cakephp

✭ 2,760

PHP shell ruby javascript Starlark hack security password-manager cakephp passbolt

Shiva

An Ansible playbook to provision a host for penetration testing and CTF challenges

✭ 220

python security ansible ctf ctf-tools ansible-playbook

Chromium for spider

dynamic crawler for web vulnerability scanner

✭ 220

html security crawler spider puppeteer chromium

Fuzzit

CLI to integrate continuous fuzzing with Fuzzit

✭ 220

go security fuzzing vulnerability fuzz-testing

Aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

✭ 218

python security aws security-tools graph pentesting neo4j iam

Synwall

A zero-configuration (IoT) firewall

✭ 219

c security driver linux-kernel firewall

Pypacker

📦 The fastest and simplest packet manipulation lib for Python

✭ 216

python security testing network tcp protocol parsing socket udp ip pcap bgp packets ethernet arp

Nsec

A modern and easy-to-use cryptographic library for .NET Core based on libsodium

✭ 217

csharp security dotnet dotnet-core cryptography encryption crypto hash libsodium sha256 hmac ed25519 curve25519

Zio Json

Fast, secure JSON library with tight ZIO integration.

✭ 218

scala security json performance

Wazuh Kibana App

Wazuh - Kibana plugin

✭ 212

typescript security monitoring elasticsearch kibana incident-response security-hardening vulnerability-detection compliance gdpr intrusion-detection ids log-analysis pci-dss

Libscout

LibScout: Third-party library detector for Java/Android apps

✭ 217

java android security static-analysis detection semantic-versioning

Contact.sh

An OSINT tool to find contacts in order to report security vulnerabilities.

✭ 216

shell security osint infosec bugbounty

Binaryanalysis Ng

Binary Analysis Next Generation (BANG)

✭ 215

python security compliance

Gortr

The RPKI-to-Router server used at Cloudflare

✭ 216

go security cryptography prometheus cloudflare bgp

Awesome Java Security

Awesome Java Security Resources 🕶☕🔐

✭ 216

java security awesome awesome-list security-tools static-analysis security-testing

Express Gateway

A microservices API Gateway built on top of Express.js

✭ 2,583

javascript security microservices microservice oauth2 expressjs api-gateway service-discovery oauth2-server express-middleware endpoints express-gateway

Ctf All In One

CTF竞赛权威指南

✭ 2,807

c F#python rust ruby shell security web hacking reverse-engineering book crypto exploit ctf pwn misc

Kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

✭ 189

security infrastructure-as-code appsec cloudnative

Wazuh Docker

Wazuh - Docker containers

✭ 213

css docker security monitoring elasticsearch incident-response security-hardening vulnerability-detection compliance intrusion-detection ids log-analysis pci-dss

Web Launch Checklist

📋 A simple website launch checklist to keep track of the most important enrichment possibilities for a website.

✭ 214

html security web performance list website accessibility seo checklist

Oscp Cheat Sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

✭ 216

security pentesting pentest cybersecurity oscp security-testing

Open Redirect Payload List

🎯 Open Redirect Payload List

✭ 214

security payload websecurity payloads

Angularjs Csti Scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

✭ 214

python security tool angularjs exploit xss vulnerability-scanners

Fleet

The premier osquery fleet manager.