Top #sec Tools & Software

Awesome-Hacking

github

A collection of various awesome lists for hackers, pentesters and security researchers

sherlock

github

Hunt down social media accounts by username across social networks

mitmproxy

github

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

shannon

github

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

vault

github

A tool for secrets management, encryption as a service, and privileged access management

restic

github

Fast, secure, efficient backup program

web-check

github

🕵️‍♂️ All-in-one OSINT tool for analysing any website

CheatSheetSeries

github

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

algo

github

Set up a personal VPN in the cloud

nuclei

github

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

setup-ipsec-vpn

github

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Amazon Linux, Alpine and Raspberry Pi. Includes client config and management scripts.

openzeppelin-contracts

github

OpenZeppelin Contracts is a library for secure smart contract development.

keepassxc

github

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

How-To-Secure-A-Linux-Server

github

An evolving how-to guide for securing a Linux server.

trufflehog

github

Find, verify, and analyze leaked credentials

maigret

github

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

radare2

github

UNIX-like reverse engineering framework and command-line toolset

osquery

github

SQL powered operating system instrumentation, monitoring, and analytics.

API-Security-Checklist

github

Checklist of the most important security countermeasures when designing, testing, and releasing your API

sops

github

Simple and flexible tool for managing secrets

SafeLine

github

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

security-guide-for-developers

github

Security Guide for Developers

RustScan

github

🤖 The Modern Port Scanner 🤖

chezmoi

github

Manage your dotfiles across multiple diverse machines, securely.