security

Automated System Hardening Framework

Monitor your local neighbourhood's bluetooth activity

PCI-DSS compliant Debian 12/13 hardening

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Pythonic WebAuthn 🐍

最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.

Statically-linked ssh server with reverse shell functionality for CTFs and such

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Endo is a distributed secure JavaScript sandbox, based on SES

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

T Wiki 云安全知识文库，可能是国内首个云安全知识文库？

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Username enumeration and password spraying tool aimed at Microsoft O365.

Yet, just another hexo plugin for security.

The most exhaustive list of reliable DNS resolvers.

A security scanner for your LLM agentic workflows

A modular and blazing fast runtime security tool for the IoT, powered by eBPF.

in-toto is a framework to protect supply chain integrity.

The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io

Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. CSP is used to enforce that the JavaScript and styling properties within the WebView are entirely static.

OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your attention, why it matters, and what to do next. It’s your open-source Attention Agent.

Rust implementation of the Messaging Layer Security (MLS) protocol

ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers (aka The Norton for OpenClaw)

Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

🛡 Make safest code in Android. (基于libsodium实现chacha20算法,key在native中,防止被二次打包){长期维护,请star,勿fork}

Web Application Firewall (WAF) package for Laravel

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

Real-time, container-based file scanning at enterprise scale

:key: Hash type identifier (CLI & lib)