805 Open source projects that are alternatives of or similar to Libdiffuzz

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith

OSSSM (awesome). Open source short-term secure messaging

Build A GUI For Xray，给Xray造一个GUI控制端。

PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

A Central Control Plane for AWS Permissions and Access

🚀 Fast Port Scanner 🚀

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Hacking tools

Canary: Input Detection and Response

Generation-based, context-free grammar fuzzer.

The Swiss Army knife for automated Web Application Testing

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

Randomized testing for Go

Passive Security Scanner (被动式安全扫描器)

🕵️‍♀️ MixAudit provides a mix deps.audit task to scan a project Mix dependencies for known Elixir security vulnerabilities

Enumerate and disable common sources of telemetry used by AV/EDR.

It's a simple tool for test vulnerability shellshock

A PowerShell armoury for penetration testers or other random security guys

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

pentest framework

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

A Python SDK for Tufin Orchestration Suite

network visualization & vulnerability management/reporting

Awesome Golang Security resources 🕶🔐

Variation of american fuzzy lop for testing compilers for C-like languages, revised by Alex Groce & collaborators to fuzz tools processing source code in C-like languages

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

ESLint security plugin for Node.js

Fuzzing resources for feeding various fuzzers with input. 🔧

Advanced Netstat Using Python For Windows

Android Mobile Device Hardening

Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards

🤖 The Modern Port Scanner 🤖

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

Cloud Discovery provides a point in time enumeration of all the cloud native platform services

A binary analysis framework

Fuzzing Parsers with Tokens

SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user (or bot) try to register o make calls using wrong passwords.

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

🔐 Open Source Python Keylogger Collection

Remove code signatures from OSX Mach-O binaries (note: unsigned binaries cannot currently be re-codesign'ed. Patches welcome!)

Metasploit Cheat Sheet 💣

A Ruby framework designed to aid in the penetration testing of WordPress systems.

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Golang安全资源合集

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

Find web directories without bruteforce

🔨 Manage your website via terminal

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

Custom filters and other resources to use with uBlock Origin and uMatrix.

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

Audit Windows Security with best Practice

A library to check for compromised passwords

EBNF grammar fuzzer

Command line tool for testing CRLF injection on a list of domains.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Seamlessly encrypt/decrypt/edit your rails Dotenv files with the help of the Sekrets gem