Security | Ecosyste.ms: Awesome

https://github.com/docker/labs

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

containers docker docker-compose docker-tutorial dotnet java lab orchestration security swarm swarm-mode windows

Last synced: 24 Jan 2025

https://github.com/prowler-cloud/prowler

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

aws azure cis-benchmark cloud compliance cspm devsecops forensics gcp gdpr hardening iam multi-cloud python saas security security-audit security-hardening security-tools well-architected

Last synced: 18 Apr 2025

https://github.com/evilsocket/opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

application-firewall data-breach firewall linux networking security

Last synced: 22 Apr 2025

https://github.com/gophish/gophish

Open-Source Phishing Toolkit

golang gophish phishing security

Last synced: 22 Apr 2025

https://github.com/jopohl/urh

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

airspy bladerf hacking hackrf iot limesdr python qt radio rtl-sdr sdr sdrplay security usrp wireless

Last synced: 22 Apr 2025

https://github.com/secdev/scapy

Scapy: the Python-based interactive packet manipulation program & library.

hacktoberfest network network-analysis network-discovery network-security network-visualization packet-analyser packet-capture packet-crafting packet-sniffer pcap python scapy security security-tools

Last synced: 22 Apr 2025

https://github.com/future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

administrator cybersecurity freebsd go golang linux security security-audit security-automation security-hardening security-scanner security-tools security-vulnerability vulnerabilities vulnerability-assessment vulnerability-detection vulnerability-management vulnerability-scanner vulnerability-scanners vuls

Last synced: 22 Apr 2025

https://github.com/maurosoria/dirsearch

Web path scanner

appsec brute bug-bounty bugbounty dirsearch enumeration fuzzer fuzzing hacking hacking-tool infosec penetration-testing pentest-tool pentesting python red-teaming redteam scanner security wordlist

Last synced: 22 Apr 2025

https://github.com/juice-shop/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

24pullrequests application-security appsec ctf hacking hacktoberfest javascript owasp owasp-top-10 owasp-top-ten pentesting security vulnapp vulnerable

Last synced: 22 Apr 2025

https://github.com/mvt-project/mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

android forensics forensics-tools ios mobile security

Last synced: 22 Apr 2025

https://github.com/digininja/dvwa

Damn Vulnerable Web Application (DVWA)

dvwa hacking infosec php security sql-injection training

Last synced: 23 Apr 2025

https://github.com/arkenfox/user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

anti-fingerprinting anti-tracking arkenfox firefox mozilla privacy security settings

Last synced: 22 Apr 2025

https://github.com/google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

fuzz-testing fuzzing oss-fuzz security stability vulnerabilities

Last synced: 22 Apr 2025

https://github.com/trimstray/test-your-sysadmin-skills

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

answers bsd cheatsheets cybersecurity databases devops exam interview interview-questions knowledge linux network resources security skills sysadmin sysops systems unix webops

Last synced: 22 Apr 2025

https://github.com/kubescape/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

best-practice devops kubernetes mitre-attack nsa security vulnerability-detection

Last synced: 17 Apr 2025

https://github.com/chaitin/xray

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

passive-vulnerability-scanner poc security sqlinjection vulnerability vulnerability-scanner xss

Last synced: 27 Mar 2025

https://google.github.io/oss-fuzz/

OSS-Fuzz - continuous fuzzing for open source software.

fuzz-testing fuzzing oss-fuzz security stability vulnerabilities

Last synced: 15 Nov 2024

https://github.com/imranr98/obtainium

Get Android app updates straight from the source.

android apk apk-update apk-updater app-updater automation foss github github-apk-updater gitlab notifications obtainium privacy security update-checker updater

Last synced: 22 Apr 2025

https://bkimminich.github.io/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

24pullrequests application-security appsec ctf hacking hacktoberfest javascript owasp owasp-top-10 owasp-top-ten pentesting security vulnapp vulnerable

Last synced: 20 Mar 2025

https://github.com/helmetjs/helmet

Help secure Express apps with various HTTP headers

helmet http-headers javascript middleware security

Last synced: 22 Apr 2025

https://github.com/armosec/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

best-practice devops kubernetes mitre-attack nsa security vulnerability-detection

Last synced: 05 Dec 2024

https://github.com/digininja/DVWA

Damn Vulnerable Web Application (DVWA)

dvwa hacking infosec php security sql-injection training

Last synced: 27 Mar 2025

https://github.com/ethicalhack3r/DVWA

Damn Vulnerable Web Application (DVWA)

dvwa hacking infosec php security sql-injection training

Last synced: 01 Apr 2025

https://github.com/crowdsecurity/crowdsec

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

attacks-prevention detection linux protection security

Last synced: 22 Apr 2025

https://github.com/gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

cloud devsecops k8s kubernetes mesh mesh-network network networking overlay-network security self-hosted virtual-network virtual-networking vpn vpn-server wg-quick wireguard wireguard-ui wireguard-vpn zero-trust

Last synced: 22 Apr 2025

https://github.com/veeral-patel/how-to-secure-anything

How to systematically secure anything: a repository about security engineering

secure-design secure-systems security security-architecture security-assurance security-engineering threat-modeling

Last synced: 26 Mar 2025

https://github.com/projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

bugbounty exploit-development exploits fingerprint hacktoberfest nuclei nuclei-checks nuclei-templates security vulnerability-detection

Last synced: 22 Apr 2025

https://github.com/trimstray/the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

audit centos checklist cis guide hardening linux linux-hardening linux-security manual openscap pci-dss redhat-enterprise-linux security

Last synced: 11 Apr 2025

https://github.com/anchore/grype

A vulnerability scanner for container images and filesystems

container-image containers cyclonedx docker go golang hacktoberfest oci openvex security static-analysis tool vex vulnerabilities vulnerability

Last synced: 18 Apr 2025

https://github.com/trimstray/the-practical-linux-hardening-guide?utm_campaign=featured&utm_medium=email&utm_source=programmingdigest

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

audit centos checklist cis guide hardening linux linux-hardening linux-security manual openscap pci-dss redhat-enterprise-linux security

Last synced: 18 Nov 2024

https://github.com/nmap/nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

asynchronous c-plus-plus libpcap linux lua machine-learning netcat network-discovery nmap osx pcre ping port-scanner security service-discovery socket windows

Last synced: 23 Apr 2025

https://github.com/monero-project/monero

Monero: the secure, private, untraceable cryptocurrency

blockchain c-plus-plus cmake cryptocurrency cryptography cryptonote monero p2p privacy security

Last synced: 08 Apr 2025

https://github.com/shadowsocks/shadowsocks-rust

A Rust port of shadowsocks

http-proxy rust security shadowsocks socks4 socks5 transparent-proxy

Last synced: 17 Apr 2025

https://github.com/upgundecha/howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

alerting chaos-engineering dev-ops devops hacktoberfest hacktoberfest-accepted incident-management incident-response infrastructure ml-ops monitoring observability on-call post-mortem reliability security site-reliability-engineering software-engineering sre sre-culture

Last synced: 22 Apr 2025

https://github.com/identityserver/identityserver4

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

aspnet-core dotnet identity identityserver4 oauth2 openid-connect security

Last synced: 18 Jan 2025

https://github.com/DuendeArchive/IdentityServer4

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

aspnet-core dotnet identity identityserver4 oauth2 openid-connect security

Last synced: 14 Mar 2025

https://github.com/toniblyx/my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

auditing aws-infrastructure aws-inventory aws-lambda cloud cloudtrail dfir iam incident-response security security-tools

Last synced: 22 Apr 2025

https://github.com/samratashok/nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

activedirectory hacking infosec nishang penetration-testing powershell red-team redteam security

Last synced: 10 Apr 2025

https://github.com/spring-projects/spring-security

Spring Security

framework java security spring spring-framework

Last synced: 22 Apr 2025

https://github.com/wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

hacking-tool scan scanner security security-scanner wordpress wpscan wpvulndb

Last synced: 22 Apr 2025

https://github.com/sigmahq/sigma

Main Sigma Rule Repository

elasticsearch ids logging monitoring security siem signatures splunk sysmon

Last synced: 17 Apr 2025

https://github.com/bregman-arie/devops-resources

DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP

aws bash checklists containers devops docker go interview jenkins linux mongo python questions security sql

Last synced: 09 Apr 2025

https://github.com/mailpile/mailpile

A free & open modern, fast email client with user-friendly encryption and privacy features

e-mail imap-client pgp search-engine security smtp-client tags

Last synced: 10 Apr 2025

https://github.com/mailpile/Mailpile

A free & open modern, fast email client with user-friendly encryption and privacy features

e-mail imap-client pgp search-engine security smtp-client tags

Last synced: 22 Mar 2025

https://github.com/SigmaHQ/sigma

Main Sigma Rule Repository

elasticsearch ids logging monitoring security siem signatures splunk sysmon

Last synced: 24 Mar 2025

https://github.com/1n3/sn1per

Attack Surface Management Platform

attack-surface attack-surface-management attacksurface bugbounty-platform cybersecurity hacking hacking-tools osint-framework osint-tool penetration-testing pentest-scripts pentest-tool pentest-tools pentesting pentesting-tools security security-tools sn1per sn1per-professional

Last synced: 22 Apr 2025

https://github.com/1N3/Sn1per

Attack Surface Management Platform

attack-surface attack-surface-management attacksurface bugbounty-platform cybersecurity hacking hacking-tools osint-framework osint-tool penetration-testing pentest-scripts pentest-tool pentest-tools pentesting pentesting-tools security security-tools sn1per sn1per-professional

Last synced: 24 Mar 2025

https://github.com/go-acme/lego

Let's Encrypt/ACME client and library written in Go

acme acme-client certificate dns letsencrypt rfc8555 rfc8737 rfc8738 security tls

Last synced: 22 Apr 2025

https://github.com/quasar/Quasar

Remote Administration Tool for Windows

administration c-sharp dotnet mono net protobuf rat red-team remote remote-control remote-desktop security windows

Last synced: 24 Mar 2025

https://github.com/quasar/quasar

Remote Administration Tool for Windows

administration c-sharp dotnet mono net protobuf rat red-team remote remote-control remote-desktop security windows

Last synced: 17 Jan 2025

https://github.com/frappe/frappe

Low code web framework for real world applications, in Python and Javascript

cms email erpnext frappe full-stack javascript low-code mariadb multitenant postgres python rest-api security socket-io web-framework webhooks

Last synced: 22 Apr 2025

https://github.com/jofpin/trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

flask footprint hacking hacking-tool jose-pino osint phising python recognition security social-engineering tracking

Last synced: 09 Apr 2025

https://github.com/simplex-chat/simplex-chat

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

chat double-ratchet e2ee encryption haskell messaging privacy protocol security

Last synced: 22 Apr 2025

https://github.com/securego/gosec

Go security checker

golang security security-automation security-tools static-analysis static-code-analysis

Last synced: 23 Apr 2025

https://github.com/kishikawakatsumi/keychainaccess

Simple Swift wrapper for Keychain that works on iOS, watchOS, tvOS and macOS.

keychain security touch-id

Last synced: 23 Apr 2025

https://github.com/unicorn-engine/unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

arm arm64 cpu cpu-emulator emulator framework m68k mips powerpc reverse-engineering riscv s390x security sparc systemz tricore x86 x86-64

Last synced: 17 Apr 2025

https://github.com/sensepost/objection

📱 objection - runtime mobile exploration

android framework frida instrumentation ios mobile pentest security

Last synced: 22 Apr 2025

https://github.com/capstone-engine/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

arm arm64 bpf disassembler ethereum framework m0s65xx m680x m68k mips powerpc reverse-engineering riscv security sparc systemz tms320c64x webassembly x86 x86-64

Last synced: 22 Apr 2025

https://github.com/kishikawakatsumi/KeychainAccess

Simple Swift wrapper for Keychain that works on iOS, watchOS, tvOS and macOS.

keychain security touch-id

Last synced: 09 Dec 2024

https://github.com/linkedin/school-of-sre

At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

git hadoop linux mysql networking nosql python security sre system-design

Last synced: 08 Apr 2025

https://github.com/golang-jwt/jwt

Go implementation of JSON Web Tokens (JWT).

auth ed25519 go golang jwt security

Last synced: 22 Apr 2025

https://github.com/yokoffing/betterfox

Firefox user.js for speed, privacy, and security. Your favorite browser, but better.

anti-tracking firefox gecko mozilla performance privacy security settings speed tracking web-browser

Last synced: 23 Apr 2025

https://github.com/falcosecurity/falco

Cloud Native Runtime Security

cloud-native cncf cncf-project containers ebpf falco hacktoberfest kubernetes runtime-security security

Last synced: 22 Apr 2025

https://github.com/ImranR98/Obtainium

Get Android app updates straight from the source.

android apk apk-update apk-updater app-updater automation foss github github-apk-updater gitlab notifications obtainium privacy security update-checker updater

Last synced: 24 Mar 2025

https://github.com/telekom-security/tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

deception docker elk honeypot network-security security t-pot

Last synced: 23 Apr 2025

https://github.com/graylog2/graylog2-server

Free and open log management

amqp gelf graylog hacktoberfest kafka log-analysis log-collector log-management log-viewer logging logging-server secure-logging security siem syslog

Last synced: 17 Apr 2025

https://github.com/yokoffing/Betterfox

Firefox user.js for speed, privacy, and security. Your favorite browser, but better.

anti-tracking firefox gecko mozilla performance privacy security settings speed tracking web-browser

Last synced: 27 Mar 2025

https://github.com/aquynh/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

arm arm64 bpf disassembler ethereum framework m0s65xx m680x m68k mips powerpc reverse-engineering riscv security sparc systemz tms320c64x webassembly x86 x86-64

Last synced: 13 Mar 2025