TlsfuzzerSSL and TLS protocol test suite and fuzzer
Stars: ✭ 335 (+123.33%)
LogESPOpen Source SIEM (Security Information and Event Management system).
Stars: ✭ 162 (+8%)
RaptorWeb-based Source Code Vulnerability Scanner
Stars: ✭ 314 (+109.33%)
WsltoolsWeb Scan Lazy Tools - Python Package
Stars: ✭ 288 (+92%)
default-http-login-hunterLogin hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.
Stars: ✭ 285 (+90%)
FaradayFaraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.
Stars: ✭ 3,198 (+2032%)
nim-contraLightweight Self-Documenting Design by Contract Programming and Security Hardened mode.
Stars: ✭ 46 (-69.33%)
ArachniWeb Application Security Scanner Framework
Stars: ✭ 2,942 (+1861.33%)
burp-aem-scannerBurp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.
Stars: ✭ 60 (-60%)
tell-me-your-secretsFind secrets on any machine from over 120 Different Signatures.
Stars: ✭ 31 (-79.33%)
ElectriceyeContinuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.
Stars: ✭ 255 (+70%)
ansible-role-auditbeatAnsible role to install auditbeat for security monitoring. (Ruleset included)
Stars: ✭ 15 (-90%)
django-security-checkHelps you continuously monitor and fix common security vulnerabilities in your Django application.
Stars: ✭ 69 (-54%)
gcp-firewall-enforcerA toolbox to enforce firewall rules across multiple GCP projects.
Stars: ✭ 77 (-48.67%)
Security4DelphiEnables and use of the concept of security in your Delphi applications
Stars: ✭ 39 (-74%)
OWASP-Calculator🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment
Stars: ✭ 109 (-27.33%)
SlidesThe repo contains all the slide deck that was used during my presentation at various webinars, conferences, and meetups.
Stars: ✭ 56 (-62.67%)
Pest🐞 Primitive Erlang Security Tool
Stars: ✭ 79 (-47.33%)
php-builder🐘 Build PHP 8.0 and newer
Stars: ✭ 57 (-62%)
nerfballWant to see how something like Internet Chemotherapy works without bricking your own vms? This is a jail to reduce the python runtime from doing bad things on the host when running untrusted code. Nerf what you do not need 👾 + 🐛 ⚽ 🏈 🐳
Stars: ✭ 19 (-87.33%)
NotrulerThe opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Stars: ✭ 72 (-52%)
cnitchContainer Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
Stars: ✭ 68 (-54.67%)
cyclonedx-cliCycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
Stars: ✭ 154 (+2.67%)
SpydanA web spider for shodan.io without using the Developer API.
Stars: ✭ 30 (-80%)
Rvm1 AnsibleThe official ansible RVM role to install and manage your Ruby versions.
Stars: ✭ 246 (+64%)
Rhel7 StigAnsible role for Red Hat 7 STIG Baseline
Stars: ✭ 230 (+53.33%)
coraza-caddyOWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
Stars: ✭ 75 (-50%)
Ansible Role ZshSetup antigen with oh-my-zsh, powerlevel10k theme, fzf, autosuggestions, syntax-highlighting
Stars: ✭ 210 (+40%)
RbenvAnsible role for installing rbenv.
Stars: ✭ 187 (+24.67%)
RHEL8-STIGAnsible role for Red Hat 8 STIG Baseline
Stars: ✭ 73 (-51.33%)
CrumbleMenu driven wordlist generator in C++
Stars: ✭ 19 (-87.33%)
cyclonedx-pythonCreates CycloneDX Software Bill of Materials (SBOM) from Python projects and environments.
Stars: ✭ 78 (-48%)
Ansible Role K3sAnsible role for installing k3s as either a standalone server or HA cluster.
Stars: ✭ 132 (-12%)
cwe-toolA command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
Stars: ✭ 40 (-73.33%)
cloudrasp-log4j2一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.
Stars: ✭ 105 (-30%)
Rhel6 StigAnsible role for Red Hat 6 DISA STIG
Stars: ✭ 96 (-36%)
Gscan本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
Stars: ✭ 1,177 (+684.67%)
BlowholeDocker auditing and enumeration script.
Stars: ✭ 21 (-86%)
PurifyAll-in-one tool for managing vulnerability reports from AppSec pipelines
Stars: ✭ 72 (-52%)
clair-cicdMaking CoreOS' Clair easily work in CI/CD pipelines
Stars: ✭ 27 (-82%)
ansible-role-docker-ceAnsible role to install Docker CE on AlmaLinux/Rocky/CentOS/Fedora/RHEL(Redhat)/Ubuntu/Debian/Mint/Raspbian
Stars: ✭ 73 (-51.33%)
phan-taint-check-pluginGithub mirror of "mediawiki/tools/phan/SecurityCheckPlugin" - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)
Stars: ✭ 21 (-86%)
IotsharkIotShark - Monitoring and Analyzing IoT Traffic
Stars: ✭ 69 (-54%)
Cloud Security AuditA command line security audit tool for Amazon Web Services
Stars: ✭ 68 (-54.67%)