security

Superseded by https://github.com/aquasecurity/trivy-operator

A GitHub Action for authenticating to Google Cloud.

Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

Modern camera app focused on privacy and security with QR & barcode scanning.

A utility to safely generate malicious network traffic patterns and evaluate controls.

Useful Google Dorks for WebSecurity and Bug Bounty

Cloud-native authorization for modern applications and APIs

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

cwe_checker finds vulnerable patterns in binary executables

Full Toolkit for Next-Level Domain Analysis

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

An Active Defense and EDR software to empower Blue Teams

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Environment variables meet macOS Keychain and gnome-keyring <3

FIDO2 Conformant WebAuthn and Passkey backend library for golang

The repo contains a series of challenges for learning Frida for Android Exploitation.

A Slack bot for GitHub organization management -- and other things too

Linting tool for CloudFormation templates

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

a collection about Windows 11

secator - the pentester's swiss knife

A Tox-based instant messaging and video chat client.