Top #c Tools & Software

find-sec-bugs

github

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

brutespray

github

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

awesome-cloud-security

github

🛡️ Awesome Cloud Security Resources ⚔️

Malcolm

github

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

cloudfox

github

Automating situational awareness for cloud penetration tests.

SSH-Snake

github

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

Diamorphine

github

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

stratus-red-team

github

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

go-captcha

github

🖖 GoCaptcha: A high-performance, interactive behavior captcha library for Go. Supporting click, slide, drag-drop, and rotation modes to secure your applications with ease.

cargo-crev

github

A cryptographically verifiable code review system for the cargo (Rust) package manager.

burpgpt

github

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

accesscontrol

github

Role and Attribute based Access Control for Node.js

Shuffle

github

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

SpringBoot-Scan

github

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

tag-security

github

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

nono

github

nono - a capability-based, multiplexing sandbox tool, built for developers - lift'n'shift seamless path to prod. Run agents securely without needing any additional infra, zero setup, zero latency.

itext-java

github

iText for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText can be a boon to nearly every workflow.

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.

cicd-goat

github

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

cloudsplaining

github

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

pyt

github

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

oauth2

github

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

articuler.ai

producthunt

Describe your goal. Meet the right professional.

Clipto

producthunt

Fully local, natural language search over terabytes of media