security

WireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS. Includes interactive setup and client management.

A p2p, secure file storage, social network and application protocol

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

🖖 GoCaptcha: A high-performance, interactive behavior captcha library for Go. Supporting click, slide, drag-drop, and rotation modes to secure your applications with ease.

DockFlare: Automate Cloudflare Tunnels with Docker Labels

Free Windows, Mac and Linux cleaner, scanner, and more.

Active Directory and Internal Pentest Cheatsheets

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

通用的Android inline hook库，支持thumb，arm32，arm64

Daily feed of bad IPs (with blacklist hit scores)

A fork and successor of the Sulley Fuzzing Framework

HTTP middleware for Go that facilitates some quick security wins.

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

An NFC research toolkit application for Android

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

OWASP API Security Project

A cryptographically verifiable code review system for the cargo (Rust) package manager.

Role and Attribute based Access Control for Node.js

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.

🔐🌐 Privacy-respecting web frontends for popular services

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

iText for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText can be a boon to nearly every workflow.

Binary Analysis Platform

Easy to use alarm system integration for Home Assistant