Top #sec Tools & Software

safe-rules

github

详细的C/C++编程规范指南，由360质量工程部编著，适用于桌面、服务端及嵌入式软件系统。

nginx-tuning

github

NGINX tuning for best performance

x-springboot

github

X-SpringBoot是一个轻量级的Java快速开发平台，基于springboot3和jdk21，使用虚拟线程，可配置的SaaS功能具备RBAC功能、自动代码生成、多种存储系统，多种短信平台，可开放api授权。代码简洁，架构清晰，能快速开发项目并交付【接私活利器】

java-sec-code

github

Java web common vulnerabilities and security code which is base on springboot and spring security

osv.dev

github

Open source vulnerability DB and triage service.

vulnhuntr

github

Zero shot vulnerability discovery using LLMs

Astra

github

Automated Security Testing For REST API's

bearer

github

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Elkeid

github

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

RedELK

github

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

kics

github

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

keystone

github

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

OnionBrowser

github

An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network

captcha

github

Captcha for Laravel 5+

winafl

github

A fork of AFL for fuzzing Windows binaries

c-jwt-cracker

github

JWT brute force cracker written in C

king-phisher

github

Phishing Campaign Toolkit

redteam_vul

github

红队作战中比较常遇到的一些重点系统漏洞整理。

Wifi-Hacking

github

Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)

git-dumper

github

A tool to dump a git repository from a website

piknik

github

Copy/paste anything over the network.

nlp

github

兜哥出品 <一本开源的NLP入门书籍>

FBI-tools

github

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

ProxyCat

github

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用