Awesome Open Source

Programming Languages

Search results for information security

information-security x

1,007 search results found

Routersploit ⭐ 11,818

Exploitation Framework for Embedded Devices

Dirsearch ⭐ 11,165

Web path scanner

Spiderfoot ⭐ 11,035

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Ffuf ⭐ 10,658

Fast web fuzzer written in Go

Damn Vulnerable Web Application (DVWA)

Red Teaming Toolkit ⭐ 8,230

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Wazuh ⭐ 8,176

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Scanners Box ⭐ 7,972

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Nishang ⭐ 7,771

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Rengine ⭐ 6,446

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Traitor ⭐ 6,329

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Awesome Waf ⭐ 5,899

🔥 Web-application firewalls (WAFs) from security standpoint.

Gather and update all available and newest CVEs with their PoC.

Bugbounty Cheatsheet ⭐ 5,525

A list of interesting payloads, tips and tricks for bug bounty hunters.

Infosec_reference ⭐ 5,348

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Hetty ⭐ 5,132

An HTTP toolkit for security research.

Defaultcreds Cheat Sheet ⭐ 5,023

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

1earn ⭐ 4,841

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Awesome Infosec ⭐ 4,810

A curated list of awesome infosec courses and training resources.

Allaboutbugbounty ⭐ 4,793

All about bug bounty (bypasses, payloads, and etc)

Awesome Security Hardening ⭐ 4,670

A collection of awesome security hardening guides, tools and other resources

Awesome Shodan Queries ⭐ 4,597

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Cheatsheet God ⭐ 4,540

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Detectionlab ⭐ 4,486

Automate the creation of a lab environment complete with security tooling and logging best practices

Faraday ⭐ 4,422

Open Source Vulnerability Management Platform

Can I Take Over Xyz ⭐ 4,408

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Awesome Cybersecurity Blueteam ⭐ 4,013

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Awesome Sec Talks ⭐ 3,958

A collected list of awesome security talks

Security Study Plan ⭐ 3,949

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

Awesome Gpt Agents ⭐ 3,647

A curated list of GPT agents for cybersecurity

Cameradar ⭐ 3,626

Cameradar hacks its way into RTSP videosurveillance cameras

Linkfinder ⭐ 3,250

A python script that finds endpoints in JavaScript files

Stegcloak ⭐ 3,158

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

Xunfeng ⭐ 2,946

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Infosec Black Friday ⭐ 2,822

All the deals for InfoSec related software/tools this Black Friday

Black Hat Rust ⭐ 2,662

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Securityadvisories ⭐ 2,644

🔐 Security advisories as a simple composer exclusion list, updated daily

Securityonion ⭐ 2,589

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Snoop ⭐ 2,530

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Awesome Nodejs Security ⭐ 2,515

Awesome Node.js Security resources

Awesome Social Engineering ⭐ 2,515

A curated list of awesome social engineering resources.

Awesome Api Security ⭐ 2,492

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

Pwdb Public ⭐ 2,380

A collection of all the data i could extract from 1 billion leaked credentials from internet.

S3scanner ⭐ 2,297

Scan for misconfigured S3 buckets across S3-compatible APIs!

EMBA - The firmware security analyzer

Content ⭐ 2,065

Security automation content in SCAP, Bash, Ansible, and other formats

31 Days Of Api Security Tips ⭐ 2,006

This challenge is Inon Shkedy's 31 days API Security Tips.

Awesome Cybersecurity Handbooks ⭐ 1,980

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Jaeles ⭐ 1,951

The Swiss Army knife for automated Web Application Testing

Pwndoc ⭐ 1,827

Pentest Report Generator

Osint_collection ⭐ 1,821

Maintained collection of OSINT related resources. (All Free & Actionable)

Awesome Asset Discovery ⭐ 1,749

List of Awesome Asset Discovery Resources

Cicd Goat ⭐ 1,723

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Subjack ⭐ 1,665

Subdomain Takeover tool written in Go

Security Txt ⭐ 1,632

A proposed standard that allows websites to define security policies.

Mitmap ⭐ 1,623

📡 A python program to create a fake AP and sniff data.

Malcolm ⭐ 1,619

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Netexec ⭐ 1,596

The Network Execution Tool

Eggshell ⭐ 1,589

iOS/macOS/Linux Remote Administration Tool

Your Everyday Threat Intelligence

Metlo ⭐ 1,537

Metlo is an open-source API security platform.

Bashfuscator ⭐ 1,495

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Cloakify ⭐ 1,483

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

Nidhogg ⭐ 1,453

Nidhogg is an all-in-one simple to use rootkit.

Malice ⭐ 1,429

VirusTotal Wanna Be - Now with 100% more Hipster

Adalanche ⭐ 1,380

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

Name That Hash ⭐ 1,373

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

🖖 Fast, modern, easy-to-use network scanner

Blue Team Notes ⭐ 1,344

You didn't think I'd go and leave the blue team out, right?

Android Reports And Resources ⭐ 1,312

A big list of Android Hackerone disclosed reports and other resources.

Top25 Parameter ⭐ 1,311

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

Ail Framework ⭐ 1,273

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Hardening ⭐ 1,252

Hardening Ubuntu. Systemd edition.

Crypto Opsec Selfguard Roadmap ⭐ 1,236

Here we collect and discuss the best DeFi, Blockchain and crypto-related OpSec researches and data terminals - contributions are welcome.

Cariddi ⭐ 1,228

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Wordlists ⭐ 1,200

Real-world infosec wordlists, updated regularly

Chimera ⭐ 1,192

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Mongoaudit ⭐ 1,154

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Fbi Tools ⭐ 1,153

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Anubis ⭐ 1,120

Subdomain enumeration and information gathering tool

Goofuzz ⭐ 1,119

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

Search That Hash ⭐ 1,105

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

Api Securityempire ⭐ 1,089

API Security Project aims to present unique attack & defense methods in API Security field

Metabigor ⭐ 1,087

OSINT tools and more but without API ke

Changeme ⭐ 1,058

A default credential scanner.

Fleet ⭐ 1,058

A flexible control server for osquery fleets

Moonwalk ⭐ 1,033

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Inventory ⭐ 1,019

Asset inventory of over 800 public bug bounty programs.

Awesome Job Boards ⭐ 1,018

Learn365 ⭐ 1,006

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

Cyber Security ⭐ 1,000

My cyber security tools

My Infosec Awesome ⭐ 983

My curated list of awesome links, resources and tools on infosec related topics

Appsecezine ⭐ 968

AppSec Ezine Public Repository.

Plumhound ⭐ 958

Bloodhound for Blue and Purple Teams

Malcom - Malware Communications Analyzer

Most usable tools for iOS penetration testing

Deimosc2 ⭐ 926

DeimosC2 is a Golang command and control framework for post-exploitation.

Security Cheatsheets ⭐ 901

🔒 A collection of cheatsheets for various infosec tools and topics.

Hunting Queries Detection Rules ⭐ 865

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Related Searches

Python Information Security (342)

Penetration Testing Information Security (281)

1-100 of 1,007 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.