Security · security Tools

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

gowitness

github

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Harden-Windows-Security

github

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

mythril

github

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

awesome-sec-talks

github

A collected list of awesome security talks

tamperchrome

github

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

ssh-audit

github

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

knockpy

github

Knock Subdomain Scan

Valet

github

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

ring

github

An experiment.

i2pd

github

🛡 I2P: End-to-End encrypted and anonymous Internet

vm2

github

Advanced vm/sandbox for Node.js

boundary

github

Boundary enables identity-based access management for dynamic infrastructure.

ciso-assistant-community

github

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 130+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

hawk

github

✔️ Secure, simple key-value storage for Android

shhgit

github

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

reverse-shell-generator

github

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

nsjail

github

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

manticore

github

Symbolic execution tool

pocsuite3

github

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

openssh-portable

github

Portable OpenSSH

awesome-api-security

github

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

sslyze

github

Fast and powerful SSL/TLS scanning library.

vulscan

github

Advanced vulnerability scanning with Nmap NSE