Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

✭ 182

security makefile hacking security-tools pentesting penetration-testing infosec bugbounty hacking-tool security-audit enumeration offensive-security security-vulnerability

Yawast

YAWAST ...where a pentest starts. Security Toolkit for Web-based Applications

✭ 181

python security ssl tls security-audit security-scanner appsec

Mozdef

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

✭ 2,164

python javascript HTML CSS shell Makefile Dockerfile security elasticsearch elk siem elk-stack abandoned unmaintained

Websitesvulnerabletossti

Simple websites vulnerable to Server Side Template Injections(SSTI)

✭ 180

security

Papers

Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记

✭ 181

python security awesome fuzzing papers

Debian Cis

PCI-DSS compliant Debian 9/10 hardening

✭ 180

shell security debian audit pci-dss

Vulnerable Apps

✭ 179

python docker security ansible vulnerabilities applications

Mosec 2017

📝 The third MOSEC mobile security technology summit 第三届 MOSEC 移动安全技术峰会参会分享

✭ 180

ios security jailbreak

React Native Linkedin

🔗 React-Native LinkedIn, a simple LinkedIn login library for React-Native or Expo with WebView and Modal

✭ 180

typescript react security react-native login webview linkedin secret

Enigma

Multiplatform payload dropper

✭ 180

python security pentest payload

Osquery Extensions

osquery extensions by Trail of Bits

✭ 180

c security sql monitoring intrusion-detection osquery

Ssl Kill Switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

✭ 2,420

objective c c Makefile ios security macos reverse-engineering ssl cydia ssl-pinning blackbox

Awesome Vulnerable Apps

Awesome Vulnerable Applications

✭ 180

security awesome awesome-list hacking penetration-testing bugbounty bug

Csrf Protector Php

CSRF Protector library: standalone library for CSRF mitigation

✭ 178

security owasp csrf

Laravel Authorize

A middleware to check authorization

✭ 179

security laravel middleware authorization

Spring Vault

Provides familiar Spring abstractions for HashiCorp Vault

✭ 179

java security framework spring encryption vault secrets

Avpwn

List of real-world threats against endpoint protection software

✭ 179

security vulnerability exploits antivirus

Adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

✭ 179

python security automation vulnerability

Universaltoken

Implementation of Universal Token for Assets and Payments

✭ 176

javascript security ethereum finance universal token erc20

Cryptag

Encrypted, taggable, searchable cloud storage

✭ 178

go security cryptography privacy data encryption cloud-storage

Blackhat Python Book

Code from Blackhat Python book

✭ 178

python python3 security pentesting penetration-testing security-automation

Runtime

Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers).

✭ 2,103

go Makefile shell docker security kubernetes containers k8s virtual-machine container virtualization qemu kvm oci cri-o

Invoker

Penetration testing utility, and antivirus assessment tool.

✭ 178

powershell bytecode security windows downloader injection dll process offensive-security cmd task-scheduler

Home

Welcome to Janssen: the world's fastest cloud native identity and access management platform

✭ 176

security api oauth identity sso iam openid

Phishingkithunter

Find phishing kits which use your brand/organization's files and image.

✭ 177

python security phishing threat-hunting threat-intelligence

Repulsive Grizzly

Application Layer DoS Testing Framework

✭ 177

python security aws

Intrec Pack

Intelligence and Reconnaissance Package/Bundle installer.

✭ 177

shell bash linux security automation security-tools pentesting osint pentest installer reconnaissance recon enumeration threatintel

Externalsecret Operator

An operator to fetch secrets from cloud services and inject them in Kubernetes

✭ 177

go hacktoberfest security kubernetes aws cloud azure cloud-native gcp

Securify

[DEPRECATED] Security Scanner for Ethereum Smart Contracts

✭ 177

java solidity security ethereum static-analysis obsolete evm

Lisa

Sandbox for automated Linux malware analysis.

✭ 177

python linux security iot malware malware-analysis internet-of-things

Awesome Security Audits

A collection of public security audits.

✭ 175

go golang security awesome awesome-list security-audit

Stegcloak

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

✭ 2,379

javascript security hacking functional-programming security-tools cryptography privacy compression infosec hacking-tool steganography cipher ramdajs data-exfiltration stego hacking-tools

Badssl.com

🔒 Memorable site for testing clients against bad SSL configs.

✭ 2,234

HTML Makefile CSS javascript shell ruby Dockerfile security testing nginx chrome browser https ssl tls mitm sha1 rcpp

Sam

System Architecture Mapper

✭ 176

javascript security networking analysis diagnostics

Ksprefs

🚀⚡ Kotlin SharedPreferences wrapper & cryptographic preferences android library.

✭ 176

kotlin android security library xml encryption wrapper maven aes sharedpreferences base64

Ansible Role Wireguard

Ansible role for installing WireGuard VPN. Supports Ubuntu, Debian, Archlinx, Fedora and CentOS.

✭ 176

html linux security ansible networking vpn ansible-role

Notable

Notable - a simple note taking application

✭ 175

go golang linux security macos notes

Ivre

Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Docker Openvpn

🔐 Out of the box stateless openvpn-server docker image which starts in less than 2 seconds

✭ 174

shell docker security docker-image vpn openvpn vpn-server

Jwt Hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

✭ 172

go security hacking tool jwt testing-tools bugbounty cracking

Bottle Cork

Authentication module for the Bottle and Flask web frameworks

✭ 174

python python3 python2 security web http flask authentication authorization

Advancedmemorychallenges

Advanced buffer overflow and memory corruption security challenges

✭ 174

security cybersecurity memory-hacking

Hackingtools

Exhaustive list of hacking tools

✭ 174

security list

Sensitivefilescan

✭ 174

python hack security crawler penetration-testing vulnerability-detection

Dnxfirewall

dnxfirewall (dad's next-gen firewall), a pure Python next generation firewall built on top of Linux kernel/netfilter.

✭ 174

python security networking security-tools privacy firewall antivirus

Magicpad

MagicPad is an encryption suite for beginners. It is designed to be run standalone via the browser or executable (Electron).

✭ 174

html security electron mobile cryptography privacy encryption pwa offline cybersecurity tor standalone gpg pgp

Yar

Yar is a tool for plunderin' organizations, users and/or repositories.

✭ 174

go golang security tool osint infosec reconnaissance secrets

Tuktuk

Tool for catching and logging different types of requests.

✭ 174

go golang security pentest bugbounty

Security Checker

PHP frontend for security.symfony.com

✭ 2,036

PHP security composer

Blokada

The official repo for Blokada for Android and iOS.

✭ 2,427

swift kotlin rust android ios security privacy dns vpn adblocker blocker adblocking blokada

Pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

✭ 2,061

python security flask static-analysis static-code-analysis dataflow program-analysis abstract-syntax-tree abstract-syntax control-flow-graph taint-analysis fixed-point taint pyt fixed-point-analysis dataflow-analysis

Antiddos System

🛡️⚔️ Protect your web app from DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line!

✭ 173

hack security web hacking security-tools robot verification captcha secure protection ddos

Jaeles Signatures

Default signature for Jaeles Scanner

✭ 172

security bugbounty vulnerability-scanner

Deep Spying

Spying using Smartwatch and Deep Learning

✭ 172

python deep-learning security data-science neural-networks privacy recurrent-neural-networks

Authorizer

Authorizer is a Password Manager for Android. It emulates an HID keyboard over USB and enters your credentials on your target device. Additionally it supports OTP 🔑📴

✭ 172

java android security encryption bluetooth usb password-manager otp gpg hid smartphone password-store

241-300 of 3063 security projects