security-tools

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

An advanced tool for working with access tokens and Windows security policy.

👻Impost3r -- A linux password thief

Galah: An LLM-powered web honeypot.

Bringing back the most advanced system and security analysis tool.

A powerful tool for using AWS Identity Center for the CLI and web console.

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse engineers, and low-level programmers.

Protect your secrets using Gitleaks-Action

Ansible role to apply a security baseline. Systemd edition.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

A programming language exclusively designed for cybersecurity

Godot Secure is a Simple Python Script That modify the Godot Source Code Automatically, to integrate Camellia-256 / AES-256 encryption with a unique security token system. This solution creates a cryptographically unique engine build that prevents generic decryption tools from accessing your game assets.

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

:books:Translate the distinct technical blogs. Please star or watch. Welcome to join me.

🧹 Cleaning up images from Kubernetes nodes

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

Scan installed EDRs and AVs on Windows

Pen Test Report Generation and Assessment Collaboration

Offensive security platform that automates attack surface discovery and vulnerability management

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).