security Tools

drozer

github

The Leading Security Assessment Framework for Android.

tracee

github

Linux Runtime Security and Forensics using eBPF

CTF-All-In-One

github

CTF竞赛权威指南

zizmor

github

Static analysis for GitHub Actions

Awesome-CobaltStrike

github

List of Awesome CobaltStrike Resources

buttercup-desktop

github

:key: Cross-Platform Passwords & Secrets Vault

zrok

github

Secure internet sharing made simple.

cerbos

github

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

security_monkey

github

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

FairEmail

github

Fully featured, open source, privacy friendly email app for Android

black-hat-rust

github

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

awesome-pentest-cheat-sheets

github

Collection of the cheat sheets useful for pentesting

interactsh

github

An OOB interaction gathering server and client library

Web-Security-Learning

github

Web-Security-Learning

awesome-vehicle-security

github

🚗 A curated list of resources for learning about vehicle security and car hacking.

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

gowitness

github

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Harden-Windows-Security

github

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

mythril

github

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

awesome-sec-talks

github

A collected list of awesome security talks

gatekeeper

github

🐊 Policy Controller for Kubernetes

tamperchrome

github

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

ssh-audit

github

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

hubble

github

Hubble - Network, Service & Security Observability for Kubernetes using eBPF