Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Cybersecurity

Cybersecurity involves protecting systems, networks, and data from cyber threats. This field encompasses a wide range of practices and technologies designed to safeguard information from unauthorized access, attacks, damage, or theft. Cybersecurity includes preventive measures such as firewalls, encryption, and secure coding practices, as well as detection and response strategies like intrusion detection systems and incident response plans. This topic covers the principles, best practices, and latest trends in cybersecurity, including emerging threats and the evolving landscape of cyber defense.

https://github.com/GoogleCloudPlatform/df-ml-anomaly-detection

Streaming Anomaly Detection Solution by using Pub/Sub, Dataflow, BQML & Cloud DLP

anomaly-detection bqml cybersecurity dataflow dlp kmeans-clustering log network pubsub

Last synced: 30 Oct 2024

https://github.com/cybersecsi/dockerized-android

A container-based framework to enable the integration of mobile components in security training platforms

android cyberrange cybersecurity docker hacking

Last synced: 21 Nov 2024

https://github.com/ANG13T/payload-wizard

AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads 🪄

ai ai-assistant cybersecurity gpt llm openai payload

Last synced: 18 Jan 2025

https://github.com/europa502/sharp

An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.

anti-arpsoof arpspoof cybersecurity dos network-monitoring offensive shell-script

Last synced: 19 Dec 2024

https://github.com/europa502/shARP

An anti-ARP-spoofing application software that use active and passive scanning methods to detect and remove any ARP-spoofer from the network.

anti-arpsoof arpspoof cybersecurity dos network-monitoring offensive shell-script

Last synced: 06 Nov 2024

https://github.com/klarna-incubator/gram

Gram is Klarna's own threat model diagramming tool

appsec cybersecurity infosec threat-modeling

Last synced: 19 Dec 2024

https://github.com/coderserdar/turkcekaynaklar

Yazılım geliştirme ve genel olarak BT konularında (Siber Güvenlik, Veri Tabanı, Network, İşletim Sistemleri, Veri Yapıları ve Algoritmalar vb.) çeşitli kategorilerde türkçe kaynakların bulunduğu bir repo adresi

algoritma algoritmalar assembly beyaz-sapkali-hacker c-plus-plus c-sharp ceh cybersecurity delphi hacker makine-ogrenmesi programlama programlama-dili siber-guvenlik tasarim-desenleri turkce turkce-dokuman turkce-kaynak veri-yapilari veritabani

Last synced: 10 Jan 2025

https://github.com/aliasrobotics/RVD

Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.

bounty bug cybersecurity drones flaw hacking px4 robot robot-vulnerabilities robotics robots ros ros2 security vulnerability vulns-ros2

Last synced: 10 Nov 2024

https://github.com/Hrishikesh7665/Android-Pentesting-Checklist

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!

android android-app android-penetration-testing-checklist android-pentesting-checklist bug-bounty bugbounty checklist cybersecurity frida magisk objection penetration-testing pentesting red-teaming vulnerability-assessment vulnerability-checklist

Last synced: 06 Nov 2024

https://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more...

bugbounty bugbounty-writeups bugbountytips cve cybersecurity exploit hacking payload pentesing pentest red-team security security-writeups writeups

Last synced: 03 Nov 2024

https://github.com/puliczek/cve-2021-21123-poc-google-chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more...

bugbounty bugbounty-writeups bugbountytips cve cybersecurity exploit hacking payload pentesing pentest red-team security security-writeups writeups

Last synced: 22 Jan 2025

https://github.com/mytechnotalent/Hacking-Rust

A FREE comprehensive online Rust hacking tutorial utilizing the x64, ARM64 and ARM32 architectures going step-by-step into the world of reverse engineering Rust from scratch.

arm32 arm64 cyber cyber-security cybersecurity hack hacking hacking-tool hacking-tools ida ida-pro reverse-engineering rust rust-cheat rust-hack rust-lang windows

Last synced: 24 Dec 2024

https://github.com/FofaInfo/Awesome-FOFA

The FOFA Library collects usage tips, common scenarios, F&Q, and more for FOFA.

cybersecurity fofa osint search-engine threat-intelligence

Last synced: 17 Nov 2024

https://github.com/umair9747/Genzai

The IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities.

cybersecurity golang hacking iot iot-security penetration-testing pentesting redteam security security-scanner security-tools

Last synced: 18 Jan 2025

https://github.com/umair9747/genzai

The IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities.

cybersecurity golang hacking iot iot-security penetration-testing pentesting redteam security security-scanner security-tools

Last synced: 19 Jan 2025

https://github.com/athena-os/athena-nix

Athena OS Nix configuration files focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

cybersecurity hacking learning linux nix nixos os payload pentesting security security-tools

Last synced: 19 Jan 2025

https://github.com/duggytuxy/malicious_ip_addresses

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

botnets cyber-threat-intelligence cybersecurity ddos ipaddresses ipv4 malicious malware zombies

Last synced: 01 Nov 2024

https://github.com/c3n7ral051nt4g3ncy/prot1ntelligence

Protintelligence is a Python script for the OSINT and Cyber Community. This tool helps you to find intelligence on Protonmail users.

cybersecurity hacking infosec osint osint-python osint-tool pentesting proton protonmail python python-script python3 script

Last synced: 19 Dec 2024

https://github.com/nccgroup/whalescan

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container

cybersecurity docker

Last synced: 10 Nov 2024

https://github.com/wangyihang/apache-http-server-module-backdoor

:japanese_goblin: A Simple Backdoor For Apache HTTP Server

apache2 backdoor backdoorweb cybersecurity

Last synced: 18 Jan 2025

https://github.com/RossGeerlings/webstor

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

attack-surface bugbounty bugbounty-tool cybersecurity footprinting information-gathering infosec pentest-scripts pentest-tools pentesting pentesting-tools recon reconnaissance security security-tools

Last synced: 21 Nov 2024

https://github.com/pablolec/neoss

:heavy_check_mark: User-friendly and detailed socket statistics with a Terminal UI.

blessed command-line connection cybersecurity educational linux linux-shell monitoring network networking node-js nodejs sockets terminal tui typescript unix unix-command

Last synced: 22 Jan 2025

https://github.com/symph0nia/cyberedge

互联网资产综合扫描/攻击面测绘

cybersecurity redteam scanner security

Last synced: 19 Jan 2025

https://github.com/fr0gger/jupyter-collection

Collection of Jupyter Notebooks by @fr0gger_

cybersecurity malware-analysis python threat-intelligence

Last synced: 19 Jan 2025

https://github.com/yorcreative/laravel-scrubber

A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

cyber-security cybersecurity data-sanitization data-scrubber laravel laravel-package log log-sanitization log-scrubber logscrubber php scrubber security security-scan security-tools sensitive-data-security

Last synced: 19 Jan 2025

https://github.com/center-for-threat-informed-defense/insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

ctid cyber-threat-intelligence cybersecurity insider-threat mitre-attack threat-informed-defense

Last synced: 19 Jan 2025

https://github.com/Anof-cyber/ParaForge

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

bug-bounty bugbounty burp-extensions burpsuite cybersecurity pentesting pentesting-tools python

Last synced: 18 Nov 2024

https://github.com/cvebase/cvebase.com

cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

cve cybersecurity infosec security vulnerabilities wiki

Last synced: 21 Nov 2024

https://github.com/santosomar/who_and_what_to_follow

Who and what to follow in the world of cyber security

cyber-security cybersecurity incident-response malware network news security

Last synced: 18 Nov 2024

https://github.com/xsa/infosec-events

List of past and future infosec related events.

conferences cybersecurity events infosec security

Last synced: 14 Dec 2024

https://github.com/kviklet/kviklet

A tool to provide engineers with secure access to production databases without impairing productivity.

cyber-security cybersecurity database devops mysql postgresql

Last synced: 25 Nov 2024

https://github.com/anof-cyber/paraforge

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

bug-bounty bugbounty burp-extensions burpsuite cybersecurity pentesting pentesting-tools python

Last synced: 06 Nov 2024

https://github.com/cisagov/ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace

cisa cybersecurity google google-workspace gws opa open-policy-agent open-source python scuba security security-automation

Last synced: 23 Oct 2024

https://github.com/typedb-osi/typedb-cti

Open Source Threat Intelligence Platform

cti cyber cybersecurity intelligence osint security threat-intelligence

Last synced: 27 Oct 2024

https://github.com/keithjjones/visualize_logs

A Python library and command line tools to provide interactive log visualization.

cybersecurity investigation malware-analysis malware-research

Last synced: 21 Nov 2024

https://github.com/omar2535/GraphQLer

🔍A cutting edge context aware GraphQL API fuzzing tool!

api api-testing-framework appsec automated-testing cybersecurity fuzzing graphql pentesting

Last synced: 18 Jan 2025

https://github.com/knight0x07/pyc2bytecode

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

blueteam cybersecurity disassembler infosec infosectools malware-analysis malware-research python reverse-engineering security-tools static-analysis threat-intelligence

Last synced: 11 Nov 2024

https://github.com/BushidoUK/CTI-Lexicon

Dictionary of CTI-related acronyms, terms, and jargon

analyst cti cybersecurity threatintel

Last synced: 21 Nov 2024

https://github.com/carloocchiena/blackhat_python_book_code

Source code and exercises from the book "Black Hat Python" by Justin Seitz.

cybersecurity hacking networking penetration-testing pentesting python python3

Last synced: 22 Dec 2024

https://github.com/SKVNDR/FastDork

⚡Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from #HackerOne #Bugcrowd #Intigriti ...

bugbounty bugcrowd chrome cybersecurity dork extension fastdork google hackerone intigriti pentest-tool

Last synced: 21 Nov 2024

https://github.com/blackhatethicalhacking/xssrocket

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

bugbounty cybersecurity hacking infosec offensive penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-scanner xss-vulnerability

Last synced: 19 Jan 2025

https://github.com/akenofu/HackAllTheThings

Meticulously curated security notes with Emphasis on Application Security, DevSecOps, Cloud Computing, and Penetration Testing.

cheatsheets cybersecurity notes obsidian pentesting red-team red-teaming

Last synced: 08 Nov 2024

https://github.com/mytechnotalent/turbo-attack

A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

cyber-security cyberattack cybersecurity ddos ddos-attacks ddos-tool go golang hack hacking hacking-tool hacking-tools penetration-testing pentest pentest-tool pentesting pentesting-tools redteam redteam-tools redteaming

Last synced: 21 Nov 2024

https://github.com/PabloLec/neoss

:heavy_check_mark: User-friendly and detailed socket statistics with a Terminal UI.

blessed command-line connection cybersecurity educational linux linux-shell monitoring network networking node-js nodejs sockets terminal tui typescript unix unix-command

Last synced: 02 Nov 2024

https://github.com/center-for-threat-informed-defense/caldera_pathfinder

Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.

adversary-emulation caldera ctid cybersecurity red-team threat-informed-defense

Last synced: 20 Dec 2024

https://github.com/riskprofiler/CloudFrontier

Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.

api-gateway aws aws-security azure azure-security cloud-security cloudsecurity cyber-security cybersecurity digitalocean dynamodb gcp gcp-security lambda-functions oracle serverless serverless-framework shadow-risk shadowrisk

Last synced: 19 Nov 2024

https://github.com/blackhatethicalhacking/XSSRocket

XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.

bugbounty cybersecurity hacking infosec offensive penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-scanner xss-vulnerability

Last synced: 25 Nov 2024

https://github.com/rosesecurity/wolfpack

WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.

ansible cybersecurity infrastructure-as-code packer terraform

Last synced: 20 Jan 2025

https://github.com/center-for-threat-informed-defense/top-attack-techniques

Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques to focus on first.

ctid cyber-threat-intelligence cybersecurity mitre-attack

Last synced: 28 Dec 2024

https://github.com/miguelob/ICS-Hacking

This repository is focused on cybersecurity in the industrial world. Many industrial communication protocols and equipment is investigated and pentested

cybersecurity kali-linux modbus msfco pentesting plc profinet python s7 scada scapy siemens wireshark

Last synced: 14 Nov 2024

https://github.com/coderserdar/documents

This repo includes some kind of documentation files about Information Technologies like Programming, Operating Systems, Cyber Security, Algorithm, Mobile Development etc.

algorithm algorithms android cplusplus cpp17 cyber-security cybersecurity data-structures database delphi e-book flutter free-pascal kotlin-android lazarus llblgen object-pascal operating-system rad-studio rad-studio-ide

Last synced: 02 Dec 2024

https://github.com/onebeyond/cybersecurity-handbook

Cybersecurity handbook by One Beyond

cybersecurity handbook

Last synced: 14 Nov 2024

https://github.com/bgenev/impulse-xdr

Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.

cloud cybersecurity devops monitoring osquery security security-tools server-security siem suricata visibility vpc vpc-endpoints vps xdr

Last synced: 29 Nov 2024

https://github.com/ntop/ipt_geofence

Geographical host protection for Linux/FreeBSD

cybersecurity firewall linux netfilter

Last synced: 18 Jan 2025

https://github.com/leeberg/BlueCommand

Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard

cybersecurity dashboard empire powershell

Last synced: 21 Nov 2024

https://github.com/elysium-suite/aeacus

🔐 Vulnerability remediation scoring system

cyberpatriot cybersecurity elysium-suite go linux vulnerability-assessment windows

Last synced: 18 Nov 2024

https://github.com/csvl/SEMA

SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.

angr binary-analysis classification concolic-execution ctf cybersecurity detection linux malware malware-analysis malware-detection malware-research python reverse reverse-engineering sema static-analysis symbolic symbolic-execution windows

Last synced: 18 Jan 2025

https://github.com/safellama/plexiglass

A toolkit for detecting and protecting against vulnerabilities in Large Language Models (LLMs).

adversarial-attacks adversarial-machine-learning cybersecurity deep-learning deep-neural-networks machine-learning security

Last synced: 09 Nov 2024

https://github.com/padok-team/cognito-scanner

A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation

audit cognito cybersecurity scanner security-tools

Last synced: 02 Jan 2025

https://github.com/abdulkadir-gungor/HtmlSmuggling

HTML smuggling is a malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page. The malicious script decodes and deploys the payload on the targeted device when the victim opens/clicks the HTML attachment/link. The HTML smuggling technique leverages legitimate HTML5 and JavaScript features to hide malicious payloads and evade security detections. The HTML smuggling method is highly evasive. It could bypass standard perimeter security controls like web proxies and email gateways, which only check for suspicious attachments like EXE, DLL, ZIP, RAR, DOCX or PDF

abdulkadir abdulkadir-gungor cyber-security cybersecurity ethical-hacking ethical-hacking-tools evasive-loader evasive-loader-technique evasive-maneuvers gungor html html-smuggling htmlsmuggling javascript malware-research

Last synced: 01 Nov 2024

https://github.com/kostas-pa/LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

bugbounty crawler cybersecurity enumeration exploitation fuzzing hacking lfi lfi-detection lfi-exploitation lfi-vulnerability penetration-testing penetration-testing-tools pentest-tool pentesting python web-hacking webhacking

Last synced: 21 Nov 2024

https://github.com/liu673/Awesome-LLM4Security

This project aims to consolidate and share high-quality resources and tools across the cybersecurity domain.

cybersecurity llm sec security security-tools tools

Last synced: 06 Jan 2025

https://github.com/BugBountyResources/targets

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

bugbounty cybersecurity information infosec recon reconnaissance security security-tools

Last synced: 21 Nov 2024

https://github.com/ademking/repolist

Generate wordlists from Github repositories

cybersecurity hacking pentesting python wordlist wordlist-attack

Last synced: 01 Nov 2024

https://github.com/paulveillard/cybersecurity-red-team

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Red Team (Offensive) in Cybersecurity.

blue-team cybersecurity penetration-resistance-modeling penetration-testing red-team red-teaming red-teams security-tools security-vulnerability-assessment technical-analysis threat-intelligence threat-modeling

Last synced: 07 Dec 2024

https://github.com/joogswastaken/tg-nearby

Using Telegram's "People Nearby" feature to pinpoint people (technically) around the globe

android cybersecurity geolocation infosec java osint python telegram

Last synced: 02 Jan 2025

https://github.com/JoogsWasTaken/tg-nearby

Using Telegram's "People Nearby" feature to pinpoint people (technically) around the globe

android cybersecurity geolocation infosec java osint python telegram

Last synced: 08 Nov 2024

Cybersecurity Awesome Lists
personal-security-checklist 243 awesome-incident-response 218 awesome-security-hardening 204 DevSecOps 181 Awesome-GPT-Agents 135 osint_stuff_tool_collection 1,387 awesome-cybersecurity-blueteam 252 awesome-vehicle-security 220 awesome-nodejs-security 179 Computer-Science-Resources 51 awesome-cloud-security 153 awesome-cloud-security 297 Awesome-Cybersecurity-Datasets 54 awesome-executable-packing 666 awesome-executable-packing 667 42-resources 818 awesome-security-newsletters 37 awesome-cybersecurity-blueteam-cn 167 awesome-anti-forensic 143 netlas-cookbook 234 awesome-detection-engineering 58 awesome-cicd-attacks 82 cybersources 1,027 awesome-ios-security 134 Awesome-hacking-tools 34 guia-ackercode 226 awesome-annual-security-reports 164 awesome-sec-challenges 32 awesome-wifi-security 50 awesome-cybersecurity 58 recommendations-for-engineers 1,163 awesome-security-feed 283 Awesome-LLM4Security 139 awesome-article-collection 392 awesome-recon-tools 44 All-In-One-CyberSecurity-Resources 125 Python-Security-Tool-Database 40 awesome-cybersecurity-news 52 awesome-ai-cybersecurity 153 cybersecurity-models 32 awesome-openbsd-desktop 55 awesome-ml-for-threat-detection 32 Cyber-Christmas 44 venom 775 AwesomeResources 80 awesome-hacking 504 cybersecurity-golang-security 141 awesome-cybersecurity-learning-resources 50 awesome-anonymity-papers 30 awesome-adversarial-machine-learning 38
Cybersecurity Categories
:books: Literature 1,461 [](#table-of-contents) Table of contents 1,097 2. My TagMark Cheat Sheet 960 WELCOME 664 Table of Contents 317 Tools 303 [↑](#-content) 🛠️ Tools 303 资源列表 251 Programming 189 0x01 资料 :books: 183 Cybersecurity GPTs 173 npm and JavaScript specific security incidents and supply chain security issues 172 📚 Books 155 🌐 Blogs 155 :package: Packers 150 Miscellaneous 139 IR Tools Collection 119 Techniques 108 0x02 工具 :hammer_and_wrench: 104 📊 Data Science 102