Top #sec Tools & Software

security-101-for-saas-startups

github

security tips for startups

tetragon

github

eBPF-based Security Observability and Runtime Enforcement

Android-PIN-Bruteforce

github

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

securityonion

github

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

WebHackersWeapons

github

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

awesome-threat-detection

github

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Knowledge-Base

github

Knowledge Base 慢雾安全团队知识库

ligolo-ng

github

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

aya

github

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

santa

github

A binary authorization and monitoring system for macOS

drozer

github

The Leading Security Assessment Framework for Android.

tracee

github

Linux Runtime Security and Forensics using eBPF

CTF-All-In-One

github

CTF竞赛权威指南

zizmor

github

Static analysis for GitHub Actions

Awesome-CobaltStrike

github

List of Awesome CobaltStrike Resources

buttercup-desktop

github

:key: Cross-Platform Passwords & Secrets Vault

zrok

github

Secure internet sharing made simple.

cerbos

github

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

FairEmail

github

Fully featured, open source, privacy friendly email app for Android

black-hat-rust

github

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

awesome-pentest-cheat-sheets

github

Collection of the cheat sheets useful for pentesting

interactsh

github

An OOB interaction gathering server and client library

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

gowitness

github

🔍 gowitness - a golang, web screenshot utility using Chrome Headless