security

Official SonarQube MCP Server for code quality and security in AI agents

Ansible role to apply a security baseline. Systemd edition.

Java全栈工程师学习笔记；Spring、shiro、CAS、oauth2单点登录；cache 、Redis; web 安全及解决思路；redis、mq、quartz、docker；Docker各种组件实践等；mybatis、spring、spring boot实践；分布式锁；基于分库分表等等；Java full-stack engineer study notes; Spring, shiro, CAS, oauth2 single sign-on; cache, Redis; web security and solutions; redis, mq, quartz, docker; Docker various component practices, etc.;

A security extension for devise, meeting industry-standard security demands for web applications.

Python Remote Administration Tool (RAT) to gain meterpreter session

SonarQube plugin for JetBrains IDEs providing code quality and security feedback directly in the IDE

🌊 Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning

OpenID Connect Library for Rust

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

A fast, secure and easy to use VPN. Built by the makers of Firefox.

Smart Contract Auditor Roadmap | Learn Blockchain Security & Smart Contract Auditing

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

OpenVPN 3 Linux client - This is a mirror of https://codeberg.org/OpenVPN/openvpn3-linux/

A programming language exclusively designed for cybersecurity

Securify v2.0

Fast, security-first headless browser for AI agents. Built for automation, red teaming, web testing, and scraping, with direct HTTP traffic control and auditable sessions. Pure Rust, no Chromium or V8.

An example Node.js Relying Party implementation of the WebAuthn specification

120-tool MCP server for real-time global intelligence: markets, SEC filings, conflict, military, cyber, climate, news, and 30+ domains. AI situation briefs that cite their sources, user-defined geofences with escalation scoring, cited daily digests, live SSE dashboard. MIT, no paid API keys.

A framework to evaluate the generalization capability of safety alignment for LLMs

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected

塑造未来的安全领域智能革命

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

Low-Level Software Security for Compiler Developers

http://firewalla.com

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in the editor

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

Linux Kernel Runtime Guard

:books:Translate the distinct technical blogs. Please star or watch. Welcome to join me.

OWASP Foundation Web Respository