888 Open source projects that are alternatives of or similar to Security Scripts

ELK Stack Dockerfile

Auto IP or Domain Attack Tool ( #1 )

Custom memory allocator that helps discover reads from uninitialized memory

Because Nintendo can't do SSL properly

OSS Vulnerability Scanner for Windows Platform

A handy systems and security-focused tool, Port Authority is a very fast Android port scanner. Port Authority also allows you to quickly discover hosts on your network and will display useful network information about your device and other hosts.

A Go implementation of dirsearch.

Art of C++. Flag, logging, unit-test, json, go-style coroutine and more.

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Exploit management framework

An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

Scan only once by IP address and reduce scan times with Nmap for large amounts of data.

High-Performance Erlang Network Client Framework

Semgrep rules registry

On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.

Privacy Online Test and Resource Compendium (POTARC) 🕵🏻

nnposter's alternate fingerprint dataset for Nmap script http-default-accounts

Apache Guacamole installation bash script for RHEL 7 and CentOS 7 including options for Nginx, HTTPS, SSL, LDAP, Let's Encrypt certificates and more

Script to check validity and expiration of TLS/SSL certificate on site. May be used with Zabbix or standalone.

A Central Control Plane for AWS Permissions and Access

Collection of PowerShell network security scripts for system administrators.

A Lightweight and fully asynchronous MQTT client C library based on libev

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2021

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

dnxfirewall (dad's next-gen firewall), a pure Python next generation firewall built on top of Linux kernel/netfilter.

💔 Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement.

The full story of the CLR implementation of Meterpreter

An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#,…

Android library to reveal or obfuscate strings and assets at runtime

Docker images for infosec tools

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

🛡️⚔️ Protect your web app from DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line!

The dum^H^H^Hsimplest encryption tool in the world.

Certificate Manager in .NET Core for creating and using X509 certificates

Some of the best web shells that you might need!

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

nodejsscan is a static security code scanner for Node.js applications.

Automated NoSQL database enumeration and web application exploitation tool.

A light TLS implementation used for learning: TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3 GMSSL 1.1(国密SSL) based on libcrypto.so.

Automated brute-forcing attack tool.

A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

Username enumeration and password spraying tool aimed at Microsoft O365.

Extract uncompiled, uncompressed SPA code from Webpack source maps.

A high performance offensive security tool for reconnaissance and vulnerability scanning

Elasticsearch SSL for free. Supports native Open SSL.

Automatic Service Enumeration Script

🚀 Fast Port Scanner 🚀

低门槛跨入Https大门！网站ssl证书自动生成工具（http到https的转变），燥起来吧！

THIS REPOSITORY HAS BEEN MOVED TO https://github.com/wpscanteam/wpscan USE THAT!!!

Let's Encrypt support for Ubiquiti UbiOS firmwares

Helping create Let's Encrypt certificates for AWS Route53

A wrapper for Nmap to quickly run network scans

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

Shodan API client

A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.