Security Tools & Software

YubiKey-Guide

github

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

nuclei-templates

github

Community curated list of templates for the nuclei engine to find security vulnerabilities.

scapy

github

Scapy: the Python-based interactive packet manipulation program & library.

oss-fuzz

github

OSS-Fuzz - continuous fuzzing for open source software.

grype

github

A vulnerability scanner for container images and filesystems

vuls

github

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

netmaker

github

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

test-your-sysadmin-skills

github

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

xray

github

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

awesome-ctf

github

A curated list of CTF frameworks, libraries, resources and softwares

simplex-chat

github

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

helmet

github

Help secure Express apps with various HTTP headers

404StarLink

github

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

shadowsocks-rust

github

A Rust port of shadowsocks

awesome-hacker-search-engines

github

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

monero

github

Monero: the secure, private, untraceable cryptocurrency

the-practical-linux-hardening-guide

github

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Betterfox

github

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

MyIP

github

The best IP Toolbox. Easy to check what's your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more!

how-to-secure-anything

github

How to systematically secure anything: a repository about security engineering

awesome-threat-intelligence

github

A curated list of Awesome Threat Intelligence resources

nishang

github

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Quasar

github

Remote Administration Tool for Windows

Sn1per

github

Attack Surface Management Platform