security

FuzzBench - Fuzzer benchmarking as a service.

A modular vulnerability scanner with automatic report generation capabilities.

Software Supply Chain Transparency Log

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

AI Captcha Bypass

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

网络安全学习资料，欢迎补充

Easily configure macOS security settings from the terminal.

Program to reverse Docker images into Dockerfiles

PHP library for Two Factor Authentication (TFA / 2FA)

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.

Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.

SSHamble: Unexpected Exposures in SSH

Simple HS256, HS384 & HS512 JWT token brute force cracker.

码小六 - GitHub 代码泄露监控系统

OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.

Wazuh - Docker containers

Lightweight Certificate Transparency Log Monitor

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Security advisory database for Rust crates published through crates.io

A Huge Learning Resources with Labs For Offensive Security Players

ConardLi blogs

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

Verify apps easily.

AWS Least Privilege for Distributed, High-Velocity Deployment

bypass-url-parser

A Game of Hackers (CTF Scoreboard & Game Manager)

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.