578 Open source projects that are alternatives of or similar to Esd

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

JAVA安全SDK及编码规范

Drone pentesting framework console

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Attack surface mapping

Automated Mass Exploiter

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

Detect secret in source code, scan your repo for leaks. Find secrets with GitGuardian and prevent leaked credentials. GitGuardian is an automated secrets detection & remediation service.

Hacking Toolkit

Attack Surface Management Platform | Sn1perSecurity LLC

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

A collection of awesome security hardening guides, tools and other resources

A curated list of awesome test automation frameworks, tools, libraries, and software for different programming languages. Sponsored by http://sdclabs.com

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Penetrum LLC opensource security tool list.

Extract and aggregate threat intelligence.

Simple script that checks a domain for email protections

emba - An analyzer for Linux-based firmware of embedded devices.

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Read local Chrome cookies without root or decrypting

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

An Active Defense and EDR software to empower Blue Teams

Hardening Ubuntu. Systemd edition.

📚Translate the distinct technical blogs. Please star or watch. Welcome to join me.

fireELF - Fileless Linux Malware Framework

Golang security checker

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

HostHunter a recon tool for discovering hostnames using OSINT techniques.

r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

A web front-end for password cracking and analytics

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Public append-only ledger microservice built with Slim Framework

Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/

Awesome Python Security resources 🕶🐍🔐

macOS keychain cracking tool

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

DeimosC2 is a Golang command and control framework for post-exploitation.

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

Infection Monkey - An automated pentest tool

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Convolutional neural network for analyzing pentest screenshots

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

Modern tactical exploitation toolkit.

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

An automated bitcoin wallet collider that brute forces random wallet addresses

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

A static analysis security vulnerability scanner for Ruby on Rails applications

Web path scanner

Most usable tools for iOS penetration testing

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

Enumerate and disable common sources of telemetry used by AV/EDR.

🔒 Anti DDOS | Bash Script Project 🔒

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Performing security tests inside your CI

Steganography brute-force utility to uncover hidden data inside files