Security Tools

kics

github

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

windows_hardening

github

HardeningKitty and Windows Hardening Settings

Digital-Forensics-Guide

github

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

FISCO-BCOS

github

FISCO BCOS（发音为/ˈfɪskl bi:ˈkɒz/）是一个稳定、高效、安全的许可区块链平台，已被广泛应用于现实的行业应用。截至目前，已拥有5000多家企事业单位，400多个产业数字化标杆应用，涵盖文化版权、司法服务、政府服务、物联网、金融、智慧社区、房地产建设、社区治理、乡村振兴等领域。FISCO BCOS (pronounced /ˈfɪskl bi:ˈkɒz/) is a stable, efficient, and secure permissioned blockchain platform that has been widely used in real-world industry applications.

OnionBrowser

github

An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network

winafl

github

A fork of AFL for fuzzing Windows binaries

ScubaGear

github

Automation to assess the state of your M365 tenant against CISA's baselines

nodejsscan

github

nodejsscan is a static security code scanner for Node.js applications.

fosite

github

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

c-jwt-cracker

github

JWT brute force cracker written in C

king-phisher

github

Phishing Campaign Toolkit

redteam_vul

github

红队作战中比较常遇到的一些重点系统漏洞整理。

pac4j

github

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

Wifi-Hacking

github

Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)

git-dumper

github

A tool to dump a git repository from a website

piknik

github

Copy/paste anything over the network.

Picocrypt

github

A very small, very simple, yet very secure encryption tool.

Pi.Alert

github

WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices

FBI-tools

github

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

ProxyCat

github

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用

fibratus

github

Adversary tradecraft detection, protection, and hunting

smart-contract-vulnerabilities

github

A collection of smart contract vulnerabilities along with prevention methods

u2f-zero

github

U2F USB token optimized for physical security, affordability, and style

wifipumpkin3

github

Powerful framework for rogue access point attack.