future-architect / vuls

6.5k

Agent-less vulnerability scanner for Linux/FreeBSD/WordPress/Programming language libraries/Network devices

Go Updated May 28, 2019

CISOfy / lynis

6k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…

Good first issues

Wrong results with OpenNTPD

good first issue help wanted

#518 opened over 1 year ago by Varbin

6

Gather info on expired passwords and locked accounts

good first issue help wanted

#474 opened over 1 year ago by sigio

3

Shell Updated May 23, 2019

presidentbeef / brakeman

5.4k

A static analysis security vulnerability scanner for Ruby on Rails applications

ruby rails security static-analysis vulnerabilities brakeman security-vulnerability security-tools security-audit

Ruby Updated May 24, 2019

zricethezav / gitleaks

4.8k

Audit git repos for secrets 🔑

security security-tools git golang go scanning keys secrets-management secret

Go Updated May 27, 2019

fail2ban / fail2ban

4k

Daemon to ban hosts that cause multiple authentication errors

linux macos security intrusion-prevention fail2ban bsd gplv2 python ban-hosts intrusion-detection ids ips anti-bot attack-prevention hids security-tools loganalyzer monitoring ban-management

Good first issues

jail.conf man page failregex descriptions

documentation

#1560 opened over 2 years ago by CharlesMAtkinson

1

openvpn filters

easyfix moreinfo

#725 opened about 5 years ago by yarikoptic

8

Python Updated May 28, 2019

secdev / scapy

3.9k

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

scapy python network network-analysis network-visualization network-discovery python2 python3 python-2 python-3 pcap packet-capture packet-sniffer packet-analyser packet-crafting security security-tools network-security

Good first issues

p0f module does not detect OS version (UNKNOWN)

good first issue enhancement

#1678 opened 7 months ago by sjosz

4

Python Updated May 27, 2019

NullArray / AutoSploit

3.7k

Automated Mass Exploiter

metasploit python exploit exploitation offsec automation security-tools security

Good first issues

Vagrant documentation

good first issue enhancement

#135 opened about 1 year ago by Ekultek

README translations

good first issue help wanted

#102 opened about 1 year ago by Ekultek

6

Python Updated May 8, 2019

trimstray / htrace.sh

3k

My simple Swiss Army knife for http/https troubleshooting and profiling.

https-troubleshoting http-requests httptracer redirect-urls testing-tools security-tools debugging-tools swissarmyknife mozilla-observatory ssllabs-scan nmap nmap-scripts testssl waf sublist3r

Shell Updated May 19, 2019

atinfo / awesome-test-automation

2.9k

A curated list of awesome test automation frameworks, tools, libraries, and software for different programming langua…

Updated May 7, 2019

guardicore / monkey

2.7k

Infection Monkey - An automated pentest tool

penetration-testing security-tools security-automation infection-monkey

Good first issues

Automatically generate requirements.txt files

Beginner friendly Enhancement

#294 opened about 2 months ago by ShayNehmad

2

Island never marks monkeys as dead without a request

Beginner friendly Island

#210 opened 6 months ago by VakarisZ

3

Python Updated May 28, 2019

securego / gosec

2.3k

Golang security checker

golang security security-tools security-automation static-analysis static-code-analysis

Good first issues

Provide detailed documentation for each rule

documentation priority:high

#127 opened about 2 years ago by mmlb

11

Go Updated May 24, 2019

google / syzkaller

2.3k

syzkaller is an unsupervised, coverage-guided kernel fuzzer

linux kernel fuzz-testing fuzzing fuzzer testing security security-vulnerability security-tools

Go Updated May 28, 2019

drk1wi / Modlishka

2k

Modlishka. Reverse Proxy.

phishing penetration-testing-tools mitm reverse-proxy security-tools

Go Updated May 28, 2019

Ullaakut / cameradar

1.7k

Cameradar hacks its way into RTSP videosurveillance cameras

penetration-testing security hacking infosec rtsp cctv cameras hacking-tool pentesting security-tools netsec

Go Updated May 27, 2019

WhaleShark-Team / cobra

1.7k

Source Code Security Audit (源代码安全审计)

cobra code-audit sourcecode-analysis security-tools security-audit security-scanner

Python Updated Apr 13, 2019

toolswatch / blackhat-arsenal-tools

1.7k

Official Black Hat Arsenal Security Tools Repository

blackhat arsenal security-tools hacking-tool security-scanner forensics ics-scada webapp hacking

Updated Nov 28, 2018

toniblyx / my-arsenal-of-aws-security-tools

1.6k

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

cloud auditing incident-response aws-inventory iam dfir cloudtrail aws-infrastructure aws-lambda security security-tools

Shell Updated May 20, 2019

toniblyx / prowler

1.4k

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of th…

security security-tools security-audit security-hardening cloudtrail hardening aws-cli aws cis-benchmark prowler assessment aws-auditing compliance gdpr hipaa cis forensics cloud well-architected

Good first issues

Run Prowler using Fargate

documentation

#299 opened 3 months ago by toniblyx

10

Shell Updated May 23, 2019

subfinder / subfinder

1.3k

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework…

Good first issues

Implement Permutation Generation

good first issue enhancement

#125 opened 10 months ago by Ice3man543

2

fix windows colors support

good first issue bug

#112 opened 11 months ago by picatz

Perform Recursive Wildcard Elimination

good first issue enhancement

#46 opened about 1 year ago by Ice3man543

Go Updated Apr 1, 2019

PyCQA / bandit

1.3k

Bandit is a tool designed to find common security issues in Python code.

linter bandit security-tools security-scanner security static-code-analysis python

Good first issues

See all

No content on several links for plugins

good first issue bug

#486 opened about 1 month ago by ericwb

Docs plugin listing shows title instead of check name

good first issue bug

#367 opened 10 months ago by ericwb

config file as described in README.rst does not work

good first issue bug

#317 opened 11 months ago by davidak

3

Python Updated May 27, 2019

nikitavoloboev / privacy-respecting

1.2k

Curated List of Privacy Respecting Services and Software

privacy curated-list self-hosted security security-tools

Updated Jan 28, 2019

knqyf263 / trivy

1.2k

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

security security-tools docker containers vulnerability-scanners vulnerability-detection vulnerability golang go kubernetes

Go Updated May 28, 2019

mzet- / linux-exploit-suggester

1.2k

Linux privilege escalation auditing tool

exploits privilege-escalation-exploits kernel-exploitation applicable-exploits security-tools hacking-tool linux-exploits

Shell Updated May 11, 2019

FeeiCN / GSIL

1.1k

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

sensitive-data sensitive-data-security security-tools security-scanner

Python Updated May 14, 2019

OlivierLaflamme / Cheatsheet-God

1.1k

Penetration Testing / OSCP Biggest Reference Bank / Cheatsheet

Updated May 22, 2019

codingo / Reconnoitre

1.1k

A security tool for multithreaded information gathering and service enumeration whilst building directory structures …

Python Updated May 25, 2019

codingo / NoSQLMap

1k

Automated NoSQL database enumeration and web application exploitation tool.

Python Updated May 26, 2019

GitGuardian / APISecurityBestPractices

1k

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remedia…

api keys leaked security security-tools

Updated May 10, 2019

forseti-security / forseti-security

944

Forseti Security

google-cloud-platform security-tools gcp forseti-security

Python Updated May 25, 2019

countercept / doublepulsar-detection-script

922

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

security-scanner security-tools

Python Updated Oct 3, 2018

Security

Repositories 1,094

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues

Learn about security