Software Directory

caido

github

🚀 Caido releases, wiki and roadmap

Diamorphine

github

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

stratus-red-team

github

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

awesome-embedded-and-iot-security

github

A curated list of awesome embedded and IoT security resources.

go-captcha

github

🖖 GoCaptcha: A high-performance, interactive behavior captcha library for Go. Supporting click, slide, drag-drop, and rotation modes to secure your applications with ease.

cargo-crev

github

A cryptographically verifiable code review system for the cargo (Rust) package manager.

burpgpt

github

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

tirith

github

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

accesscontrol

github

Role and Attribute based Access Control for Node.js

android-inline-hook

github

:fire: ShadowHook is an Android inline hook library which supports thumb, arm32 and arm64.

API-Security

github

OWASP API Security Project

Shuffle

github

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

SpringBoot-Scan

github

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

tag-security

github

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

ipsum

github

Daily feed of bad IPs (with blacklist hit scores)

bank-vaults

github

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

alternative-frontends

github

🔐🌐 Privacy-respecting web frontends for popular services

nono

github

nono - a capability-based, multiplexing sandbox tool, built for developers - lift'n'shift seamless path to prod. Run agents securely without needing any additional infra, zero setup, zero latency.

itext-java

github

iText for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText can be a boon to nearly every workflow.

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.

cicd-goat

github

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

bap

github

Binary Analysis Platform

nothing-private

github

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

cloudsplaining

github

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.