423 Open source projects that are alternatives of or similar to Thug

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

a javascript static security analysis tool

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

A collection of awesome security hardening guides, tools and other resources

Open Source Tripwire®

InQL - A Burp Extension for GraphQL Security Testing

Infection Monkey - An automated pentest tool

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

Program to reverse Docker images into Dockerfiles

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

红队综合渗透框架

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

emba - An analyzer for Linux-based firmware of embedded devices.

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

JAVA安全SDK及编码规范

Most usable tools for iOS penetration testing

Enumeration sub domains(枚举子域名)

Open source incident management and response platform.

r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

🎖safely* install packages with npm or yarn by auditing them as part of your install process

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

👻Stowaway -- Multi-hop Proxy Tool for pentesters

A cross-platform note-taking & target-tracking app for penetration testers.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

A static analysis security vulnerability scanner for Ruby on Rails applications

Hacking Toolkit

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

Penetrum LLC opensource security tool list.

Exploit Pack -The next generation exploit framework

📚Translate the distinct technical blogs. Please star or watch. Welcome to join me.

Find exploit tool

A web front-end for password cracking and analytics

Daemon to ban hosts that cause multiple authentication errors

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

kube-scan: Octarine k8s cluster risk assessment tool

Detect secret in source code, scan your repo for leaks. Find secrets with GitGuardian and prevent leaked credentials. GitGuardian is an automated secrets detection & remediation service.

🔒 Anti DDOS | Bash Script Project 🔒

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

C2/post-exploitation framework

Hardening Ubuntu. Systemd edition.

SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems.

grep rough audit - source code auditing tool

[Official] Android reverse engineering tool focused on dynamic instrumentation automation. Powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

🆕 The Multi-Tool Web Vulnerability Scanner.

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

mXtract - Memory Extractor & Analyzer

An Active Defense and EDR software to empower Blue Teams

Awesome PHP Security Resources 🕶🐘🔐

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

Open-Source Security Architecture | 开源安全架构

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

Awesome Python Security resources 🕶🐍🔐

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.