An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Scapy: the Python-based interactive packet manipulation program & library.

Attack Surface Management Platform

Find and verify secrets

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

The Official Bash Bunny Payload Repository

🕵️‍♂️ All-in-one OSINT tool for analysing any website

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Protect and discover secrets using Gitleaks 🔑

A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.

The Official USB Rubber Ducky Payload Repository

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Daemon to ban hosts that cause multiple authentication errors

syzkaller is an unsupervised coverage-guided kernel fuzzer

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices