security Tools

knockpy

github

Knock Subdomain Scan

Valet

github

Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.

ring

github

An experiment.

i2pd

github

🛡 I2P: End-to-End encrypted and anonymous Internet

vm2

github

Advanced vm/sandbox for Node.js

boundary

github

Boundary enables identity-based access management for dynamic infrastructure.

ciso-assistant-community

github

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 130+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

hawk

github

✔️ Secure, simple key-value storage for Android

shhgit

github

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

reverse-shell-generator

github

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

nsjail

github

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

manticore

github

Symbolic execution tool

pocsuite3

github

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

openssh-portable

github

Portable OpenSSH

awesome-api-security

github

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

sslyze

github

Fast and powerful SSL/TLS scanning library.

vulscan

github

Advanced vulnerability scanning with Nmap NSE

pentest-wiki

github

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

cloudsploit

github

Cloud Security Posture Management (CSPM)

privatezilla

github

👀👮🐢🔥Performs a privacy & security check of Windows 10

OSCP

github

OSCP Cheat Sheet

bluemonday

github

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

sozu

github

Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!

AI-Infra-Guard

github

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.