Top #sec Tools & Software

YubiKey-Guide

github

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

nuclei-templates

github

Community curated list of templates for the nuclei engine to find security vulnerabilities.

oss-fuzz

github

OSS-Fuzz - continuous fuzzing for open source software.

grype

github

A vulnerability scanner for container images and filesystems

vuls

github

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

docker.labs

github

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

netmaker

github

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

xray

github

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

awesome-ctf

github

A curated list of CTF frameworks, libraries, resources and softwares

kubescape

github

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

simplex-chat

github

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

helmet

github

Help secure Express apps with various HTTP headers

404StarLink

github

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

shadowsocks-rust

github

A Rust port of shadowsocks

Zero

github

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

monero

github

Monero: the secure, private, untraceable cryptocurrency

sigma

github

Main Sigma Rule Repository

Betterfox

github

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

how-to-secure-anything

github

How to systematically secure anything: a repository about security engineering

awesome-threat-intelligence

github

A curated list of Awesome Threat Intelligence resources

nishang

github

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

wpscan

github

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

lego

github

Let's Encrypt/ACME client and library written in Go

spring-security

github

Spring Security