Security Tools & Software

awesome-pentest-cheat-sheets

github

Collection of the cheat sheets useful for pentesting

interactsh

github

An OOB interaction gathering server and client library

Web-Security-Learning

github

Web-Security-Learning

awesome-vehicle-security

github

🚗 A curated list of resources for learning about vehicle security and car hacking.

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

gowitness

github

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Harden-Windows-Security

github

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

mythril

github

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

awesome-sec-talks

github

A collected list of awesome security talks

tamperchrome

github

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

ssh-audit

github

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

knockpy

github

Knock Subdomain Scan

Valet

github

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

retire.js

github

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

ring

github

An experiment.

TorBot

github

Dark Web OSINT Tool

i2pd

github

🛡 I2P: End-to-End encrypted and anonymous Internet

vm2

github

Advanced vm/sandbox for Node.js

boundary

github

Boundary enables identity-based access management for dynamic infrastructure.

ciso-assistant-community

github

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 130+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

ivre

github

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

hawk

github

✔️ Secure, simple key-value storage for Android

shhgit

github

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

reverse-shell-generator

github

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)