Top #sec Tools & Software

vulscan

github

Advanced vulnerability scanning with Nmap NSE

pentest-wiki

github

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

cloudsploit

github

Cloud Security Posture Management (CSPM)

privatezilla

github

👀👮🐢🔥Performs a privacy & security check of Windows 10

OSCP

github

OSCP Cheat Sheet

bluemonday

github

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

sozu

github

Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!

Security-PPT

github

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

xunfeng

github

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

frontend-tech-list

github

📝 Frontend Tech List for Developers 💡

bouncer

github

Laravel Eloquent roles and abilities.

rizin

github

UNIX-like reverse engineering framework and command-line toolset.

chainsaw

github

Rapidly Search and Hunt through Windows Forensic Artefacts

meshbird

github

Distributed private networking

Pentest-Windows

github

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

vulnerability-Checklist

github

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Ethical-Hacking-Labs

github

Practical Ethical Hacking Labs 🗡🛡

twofactorauth

github

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

emba

github

EMBA - The firmware security analyzer

solution-architecture-patterns

github

Reusable, vendor-neutral, industry-specific, vendor-specific solution architecture patterns for enterprise

Awesome-Cybersecurity-Handbooks

github

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

TextAttack

github

TextAttack 🐙 is a Python framework for adversarial attacks, data augmentation, and model training in NLP https://textattack.readthedocs.io/en/master/

varlock

github

AI-safe .env files: Schemas for agents, Secrets for humans.

Stowaway

github

👻Stowaway -- Multi-hop Proxy Tool for pentesters