security-tools
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Here are 2,489 public repositories matching this topic...
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-
Updated
Jan 1, 2022 - Shell
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
-
Updated
Dec 28, 2021 - Go
config validation
Is your feature request related to a problem? Please describe.
It would be nice if gitleaks had a validate command that would validate examples found in the config rules. Introducing such a feature would speed up rule development and help with debugging.
Describe the solution you'd like
example entry in the rules tables
ex:
[[rules]]
id = "discord-client-secret"
desAPI, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites
-
Updated
Dec 12, 2021 - JavaScript
RTCP packet support
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
-
Updated
Jan 5, 2022 - Python
Daemon to ban hosts that cause multiple authentication errors
-
Updated
Dec 24, 2021 - Python
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-
Updated
Jan 3, 2022 - Shell
A static analysis security vulnerability scanner for Ruby on Rails applications
-
Updated
Dec 22, 2021 - Ruby
Golang security checker
-
Updated
Jan 5, 2022 - Go
A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
-
Updated
Dec 22, 2021
Infection Monkey - An automated pentest tool
-
Updated
Jan 5, 2022 - Python
RustScan has an accessible mode, rustscan --accessible which should promise not to have any weird ASCII text in it.
Write CI that runs RustScan with --accessible a few times, with different flags / options and check the terminal output to see if it contains one of these:
[!][~][>]| {}
If any of these characters appear in any of the tests, fail the CI. E
Attack Surface Management Platform | Sn1perSecurity LLC
-
Updated
Jan 2, 2022 - Shell
Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.
-
Updated
Jan 5, 2022 - Shell
We need Vagrant docs, you can find it here https://github.com/NullArray/AutoSploit/tree/dev-beta/Vagrant
README translations
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
-
Updated
Jan 6, 2022 - C#
syzkaller is an unsupervised coverage-guided kernel fuzzer
-
Updated
Jan 6, 2022 - Go
Describe the bug
In the docs found here:
https://bandit.readthedocs.io/en/latest/plugins/index.html#complete-test-plugin-listing
B109 and B111 show a description instead of a plugin name. This looks inconsistent since all the other plugin names are listed. I believe this is a result of a recent change to remove these deprecated plugins.
To Reproduce
- Navigate to https://bandit
FreeBSD uses an rc.d framework for starting up applications. The pidfile is a special case because it is used by the rc system itself. It's used to tell rc how to check the status of the controlled program, or how to stop it. It's not the responsibility of rc to write the pidfile. That falls to the controlled program.
step-ca appears to lack support for creating a pidfile, It's a desirable enha
Modlishka. Reverse Proxy.
-
Updated
Nov 10, 2021 - Go
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-
Updated
Jul 8, 2021
Next generation web scanner
-
Updated
Dec 16, 2021 - Ruby
Hey, here we need add url decoding cuz that invalid link with symbols of get request like ?, &, = etc
p.s thx for awesome tool
-
Updated
Jul 2, 2021 - Go
A Workflow Engine for Offensive Security
-
Updated
Jan 5, 2022 - Go
My simple Swiss Army knife for http/https troubleshooting and profiling.
-
Updated
Nov 21, 2021 - Shell
Linux privilege escalation auditing tool
-
Updated
Oct 19, 2021 - Shell
大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0
-
Updated
Oct 30, 2021 - C#
Description
we have NPM7 generated package-lock.json with lockFileVersion = 2. Now when we scan Node.js project using Trivy filesystem scan, Trivy does not find out packages from package-lock.json.
It is working with lockFileVersion = 1
What did you expect to happen?
It should find out packages in package-lock.json
What happened instead?
It did not find out packages from pack