security

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Automation and Scaling of Digital Forensics Tools

Google's Security extension for the Gemini CLI that finds vulnerabilities in your code changes and pull requests.

A list of Blockchain Security audit companies, solo auditors and location of public audits.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Your own self-hosted infra for lightweight VM sandboxes to safely execute untrusted code. CLI, API, Python SDK. ⭐ Star it if you like it! ⭐

Bluetooth experimentation framework for Broadcom and Cypress chips.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

Adblock Fast is a faster ad blocker for Windows, Android, iOS, Chrome, and Opera.

Agile Threat Modeling Toolkit

Damn Vulnerable NodeJS Application

A binary and file access authorization system for macOS.

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Automatic and platform-independent unpacker for Windows binaries based on emulation

❌ Revoke or update your token approvals

❄️ Firmware and simulator for Coldcard Hardware Wallet

protector & obfuscator & code virtualizer

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

:lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided)

High-speed secure pseudorandom function for short messages

Realtime secret and configuration management tool

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Tenzir is the data pipeline engine for security teams.

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers

A modern, cross-platform OpenPGP tool with a unique dual-engine core: switch freely between the battle-tested GnuPG and a modern, memory-safe Rust rPGP backend. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

Weaponize DLL hijacking easily. Backdoor any function in any DLL.