security

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites

Active Directory password filter featuring breached password checking and custom complexity rules

Smart Contract security audit reports

A Java standalone implementation of the bcrypt password hash function. Based on the Blowfish cipher it is the default password hash algorithm for OpenBSD and other systems including some Linux distributions. Includes a CLI Tool.

PHP shells that work on Linux OS, macOS, and Windows OS.

Collection of suggested apps for Obtainium.

Set of tools to audit SIP based VoIP Systems

Bao, a Lightweight Static Partitioning Hypervisor

Authorizer is a Password Manager for Android. It emulates an HID keyboard over USB and enters your credentials on your target device. Additionally it supports OTP :key::mobile_phone_off:

A tool for customers to evaluate their AWS service configurations based on AWS and community best practices and receive recommendations on potential improvements.

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

Official IVPN iOS app

Reverse shell generator written in Python 3.

Curated list of KeePass-related projects

The PHP extension for libsodium.

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

Security hardening guides for PVE and PBS, built on CIS Debian Benchmark with Proxmox specific best practices.

Conveniently and reasonably harden NixOS.

文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.

Work in progress...

Kraken, a modular multi-language webshell coded by @secu_x11

a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE

Xkeen — утилита для роутеров Keenetic. Обеспечивает работоспособность и актуальность ядра Xray и GeoIP / GeoSite из списков AntiZapret / Antifilter / v2fly

LinOTP - the open source solution for two factor authentication

EVE is Edge Virtualization Engine

Pure Go implementation of the NaCL set of API's

Release channel for TheAuditor — see blog.theauditortool.com

Static smart contract code 4naly3er

Framework for Automating Fuzzable Target Discovery with Static Analysis.