Security Tools & Software

exifcleaner

github

Cross-platform desktop GUI app to clean image metadata

sn0int

github

Semi-automatic OSINT framework and package manager

find-sec-bugs

github

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

brutespray

github

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

awesome-iot-hacks

github

A Collection of Hacks in IoT Space so that we can address them (hopefully).

Peergos

github

A p2p, secure file storage, social network and application protocol

Malcolm

github

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

solo1

github

Solo 1 firmware in C

masvs

github

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

creepjs

github

Creepy device and browser fingerprinting

secure

github

HTTP middleware for Go that facilitates some quick security wins.

noseyparker

github

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

boofuzz

github

A fork and successor of the Sulley Fuzzing Framework

SSH-Snake

github

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

caido

github

🚀 Caido releases, wiki and roadmap

Diamorphine

github

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

stratus-red-team

github

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

awesome-embedded-and-iot-security

github

A curated list of awesome embedded and IoT security resources.

go-captcha

github

🖖 GoCaptcha: A high-performance, interactive behavior captcha library for Go. Supporting click, slide, drag-drop, and rotation modes to secure your applications with ease.

cargo-crev

github

A cryptographically verifiable code review system for the cargo (Rust) package manager.

accesscontrol

github

Role and Attribute based Access Control for Node.js

android-inline-hook

github

:fire: ShadowHook is an Android inline hook library which supports thumb, arm32 and arm64.

API-Security

github

OWASP API Security Project

Shuffle

github

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.