Security
Security tools, research, and privacy
Showing 2021-2040 of 2,929 projects
aws-cloudformation/cloudformation-guard
A policy-as-code DSL to validate CloudFormation, Kubernetes, and Terraform configurations against custom rules.
samwafgo/SamWaf
SamWaf is a lightweight, open-source web application firewall for small companies, studios, and personal websites.
B16f00t/whapa
A Python-based toolset for parsing and analyzing WhatsApp chat data for forensic analysis.
google/oss-fuzz-gen
LLM-powered fuzzing tool that integrates with the OSS-Fuzz security platform to find bugs in open-source projects.
RythmStick/AMSITrigger
A C# library for detecting the presence of malicious strings in .NET applications.
eliotsykes/rails-security-checklist
A community-driven checklist for securing Ruby on Rails applications.
RenwaX23/XSS-Payloads
A repository containing a list of XSS (Cross-Site Scripting) vectors and payloads for security research and testing.
bigeagle/gohop
A VPN implementation in Go with built-in crypto and obfuscation capabilities for secure network traffic.
jdonsec/AllThingsSSRF
This is a collection of resources related to SSRF (Server-Side Request Forgery) for security researchers and developers.
CIRCL/AIL-framework
An open-source framework for analyzing and detecting information leaks, security incidents, and data privacy issues.
fnmsd/MySQL_Fake_Server
A Python tool to help MySQL client file reading and JDBC client Java deserialization for security testing.
jonluca/Anubis
Anubis is a subdomain enumeration and information gathering tool for security professionals.
OWASP/www-project-top-ten
The OWASP Top 10 is a standard awareness document for web application security.
qzeleza/kvas
A VPN and Shadowsocks client for Keenetic routers, providing secure network access.
ptresearch/AttackDetection
A library for detecting various types of network attacks and intrusions.
hahwul/XSpear
A powerful XSS scanning and parameter analysis tool written in Ruby for bug bounty and penetration testing.
0xricksanchez/paper_collection
A collection of academic papers related to fuzzing, binary analysis, and exploit development for vibe coders.
alphasoc/flightsim
A Go utility to generate malicious network traffic patterns for security testing and evaluation.
tandasat/DdiMon
A tool for monitoring and controlling kernel API calls with stealth hooks using Extended Page Tables (EPT).
adon90/pentest_compilation
A compilation of commands, tips, and scripts for penetration testing and security research.
Stay in the loop
Get weekly updates on trending AI coding tools and projects.