security-tools
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Here are 2,879 public repositories matching this topic...
Support for Microsoft Incoming Webhooks (Eg: Microsoft Teams Channel Webhooks) would be useful
Example:
https://customertenantname.webhook.office.com/webhookb2/ffffffff-ffff-ffff-ffff-ffffffffffff@ffffffff-ffff-ffff-ffff-ffffffffffff/IncomingWebhook/ffffffffffffffffffffffffffffffff/ffffffff-ffff-ffff-ffff-ffffffffffff
Possible Regex:
https:\/\/[a-z0-9A-Z]+\.webhook\.office\.comJunit-Support
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-
Updated
Aug 5, 2022 - Shell
Is your feature request related to a problem? Please describe.
Currently a hard refresh of the Index page is required in order to load the new index list and stats.
Describe the solution you'd like
A refresh button will help get the latest index list and stats.
Describe alternatives you've considered
None
Additional context
None
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
-
Updated
Aug 8, 2022 - Go
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
-
Updated
Jul 31, 2022 - JavaScript
-
Updated
Aug 7, 2022
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
-
Updated
Jul 14, 2022 - Python
Hi & welcome to Scapy's github ! This page lists issues that you can try to fix if you want to start contributing to Scapy.
Disclaimer
The BEST way to contribute to Scapy is to play around with it, to find and fix broken stuff by yourself, i.e. Before you attempt to fix one of those pesky issues, just HAVE FUN with Scapy !😺
By using Scapy in your work, experiments, hacks, course
Daemon to ban hosts that cause multiple authentication errors
-
Updated
Aug 9, 2022 - Python
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
-
Updated
Aug 7, 2022 - Shell
RustScan has an accessible mode, rustscan --accessible which should promise not to have any weird ASCII text in it.
Write CI that runs RustScan with --accessible a few times, with different flags / options and check the terminal output to see if it contains one of these:
[!][~][>]| {}
If any of these characters appear in any of the tests, fail the CI. E
A static analysis security vulnerability scanner for Ruby on Rails applications
-
Updated
Aug 9, 2022 - Ruby
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
-
Updated
Aug 9, 2022 - Shell
Golang security checker
-
Updated
Aug 8, 2022 - Go
Infection Monkey - An automated pentest tool
-
Updated
Aug 9, 2022 - Python
Attack Surface Management Platform | Sn1perSecurity LLC
-
Updated
Jun 28, 2022 - Shell
-
Updated
Jun 21, 2022 - Go
We need Vagrant docs, you can find it here https://github.com/NullArray/AutoSploit/tree/dev-beta/Vagrant
README translations
The recommendation is to set Cache-Control: private, no-store on any endpoint with sensitive information. Because while you can protect the traffic with TLS, you also need to keep sensitive information out of a client's (unencrypted) HTTP cache. I'm not sure how relevant this is to the API context of step-ca though—I've never seen an HTTP client library that caches content. But I guess the poi
Hey, here we need add url decoding cuz that invalid link with symbols of get request like ?, &, = etc
p.s thx for awesome tool
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
- create
.banditfile with content:
[bandit]
tests: B101,B102,B301
- run
bandit -c .bandit -r module/ - get error:
[main] ERROR .bandit : Error parsing file.
Expected behavior
working as described in readme
Bandit version
ba
syzkaller is an unsupervised coverage-guided kernel fuzzer
-
Updated
Aug 9, 2022 - Go
Modlishka. Reverse Proxy.
-
Updated
Feb 16, 2022 - Go
Next generation web scanner
-
Updated
Feb 5, 2022 - Ruby
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
-
Updated
Aug 9, 2022 - C#
A Workflow Engine for Offensive Security
-
Updated
Jun 8, 2022 - Go
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
-
Updated
Jan 31, 2022
Linux privilege escalation auditing tool
-
Updated
Jun 8, 2022 - Shell
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
-
Updated
Jul 28, 2022 - C++
- Wikipedia
- Wikipedia



currently we have a version selector for every git tag, which is unnecessary overhead on the user. It is not needed from documentation perspective as there aren't (shouldn't be) any docs change in patch versions, only for new/changed features.
before:
v0.27.0, v0.27.1, v0.27.2, v0.28.0
after
v0.27, v0.28