Top #sec Tools & Software

anubis

github

Weighs the soul of incoming HTTP requests to stop AI crawlers

cutter

github

Free and Open Source Reverse Engineering Platform powered by rizin

DOMPurify

github

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

lynis

github

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

wazuh

github

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

zaproxy

github

The ZAP by Checkmarx Core project

cryptomator

github

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

wifiphisher

github

The Rogue Access Point Framework

hacker101

github

Source code for Hacker101.com - a free online web and mobile security class.

awesome-security

github

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

dirsearch

github

Web path scanner

gophish

github

Open-Source Phishing Toolkit

fscan

github

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

opensnitch

github

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

tink

github

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

secguide

github

面向开发人员梳理的代码安全指南

awesome-web-security

github

🐶 A curated list of Web Security materials and resources.

crowdsec

github

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

routersploit

github

Exploitation Framework for Embedded Devices

juice-shop

github

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

DVWA

github

Damn Vulnerable Web Application (DVWA)

keeweb

github

Free cross-platform password manager compatible with KeePass

user.js

github

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

mvt

github

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.