399 Open source projects that are alternatives of or similar to Attacksurfaceanalyzer

IBM Fully Homomorphic Encryption Toolkit For Linux. This toolkit is a Linux based Docker container that demonstrates computing on encrypted data without decrypting it! The toolkit ships with two demos including a fully encrypted Machine Learning inference with a Neural Network and a Privacy-Preserving key-value search.

Micro-framework for rapid development of reusable security tools

Forseti Security

Command-line passphrase generator

Find web directories without bruteforce

Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters

Scripts to gather system configuration information for offline/remote auditing

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

Advanced Netstat Using Python For Windows

All-in-one tool for managing vulnerability reports from AppSec pipelines

安全总是无处不在...

A Machine Learning approach for classifying a file as Malicious or Legitimate

PoC tool to demonstrate vulnerabilities in wireless input devices

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Qualys sslabs-scan utility in a tiny docker image

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Explore Indicators of Compromise Automatically

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Linux命令转发记录

📷 ViewFinder - NodeJS product to make the browser into a web app. WTF RBI. CBII. Remote browser isolation, embeddable browserview, secure chrome saas. Licenses, managed, self-hosted. Like S2, WebGap, Bromium, Authentic8, Menlo Security and Broadcom, but open source with free live demos available now! Also, integrated RBI/CDR with CDR from https://github.com/dosyago/p2%2e

An ncurses-based Tox client (please make pull requests on the development fork: https://github.com/toktok/toxic)

A set of recipes useful in pentesting and red teaming scenarios

Openwrt 18.06.5 featured with the Exein's security framework

Friends don't let friends leak secrets on their terminal window 🙈

Application and Service Fingerprinting

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Machine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic and their associated threats. In this project we attempt at solving this problem by presenting two taxonomies

Documentation:

The clever vulnerability dependency finder

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Open Repository for the Open Security and Privacy Reference Architecture

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

This ansible role gets information from an AWS VPC and generate a graphical representation of security groups

An OSINT Metadata analyzing tool that filters through tags and creates reports

🍿 The perfect Checklist Website for meticulous developers.

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

Secure, human-friendly, cross-platform secrets and config.

The Swiss Army knife for automated Web Application Testing

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

Passive Security Scanner (被动式安全扫描器)

A curated list of various bug bounty tools

It's a simple tool for test vulnerability shellshock

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

Tool to predict attacker groups from the techniques and software used

Tools to automate and/or expedite response.

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

Trigram database written in C++, suited for malware indexing

An Unsupervised Graph-based Toolbox for Fraud Detection

A library to check for compromised passwords

Scrapes Router Passwords From http://www.routerpasswords.com ,more then +300 product

USB testing made easy

We propose a user-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).

A repository of sysmon configuration modules

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

A security monitoring solution for Kubernetes

Android Mobile Device Hardening

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Kali Linux 工具合集中文说明书