graudit : grep rough audit - source code auditing tool
author: wireghoul
created: 2009-06-14 05:59:17
security security-audit security-tools shell source-code vulnerability-detection


risu : Risu is Nessus parser, that converts the generated reports into a ActiveRecord database, this allows for easy report generation and vulnerability verification.
author: hammackj
created: 2010-03-20 22:32:17
nessus reporting ruby security xml-parser


graylog2-server : Free and open source log management
author: Graylog2
created: 2010-05-17 21:27:02
amqp gelf graylog kafka log-analysis log-collector log-management log-viewer logging logging-server secure-logging security siem syslog java


sixarm_ruby_password_attribute : SixArm.com » Ruby » PasswordAttribute module to add BCrypt to an ActiveRecord model
author: SixArm
created: 2010-05-24 00:00:47
authentication gem password ruby security


sixarm_ruby_password_hash : SixArm.com » Ruby » Password Hash to do secure SHA256 passwords.
author: SixArm
created: 2010-05-24 00:03:50
authentication gem password ruby security


sixarm_ruby_password_salt : SixArm.com » Ruby » Password salt to create secure user-friendly passwords
author: SixArm
created: 2010-05-24 00:06:37
authentication gem password ruby security


sixarm_ruby_password_text : SixArm.com » Ruby » PasswordText class to generate good secure random password
author: SixArm
created: 2010-05-24 00:08:58
authentication gem password ruby security


sixarm_ruby_secure_token : SixArm.com » Ruby » SecureToken class to generate a strong text string
author: SixArm
created: 2010-05-25 04:29:36
gem ruby secure security token


sixarm_ruby_secure_random : SixArm.com » Ruby » secure random number generator interface for Ruby 1.8.6 backported from 1.8.7
author: SixArm
created: 2010-05-25 04:32:17
gem random ruby secure security


Mitm : Man in the middle tool
author: Gregwar
created: 2010-08-17 11:48:56
arp-poisoning attack audit c network replayed-packets security security-tools


brakeman : A static analysis security vulnerability scanner for Ruby on Rails applications
author: presidentbeef
created: 2010-08-27 00:00:58
brakeman rails ruby security security-audit security-tools security-vulnerability static-analysis vulnerabilities


role-strategy-plugin : Jenkins Role-Strategy plugin
author: jenkinsci
created: 2010-12-13 05:50:02
authorization jenkins jenkins-plugin security java


w3af : w3af: web application attack and audit framework, the open source web vulnerability scanner.
author: andresriancho
created: 2011-08-31 23:20:34
appsec cross-site-scripting scanner security sql-injection python


aws-security-viz : Visualize your aws security groups.
author: anaynayak
created: 2011-09-18 15:44:21
aws aws-cli ec2 graph graphviz json ruby security security-groups visualization viz


fail2ban : Daemon to ban hosts that cause multiple authentication errors
author: fail2ban
created: 2011-09-28 16:24:20
anti-bot attack-prevention ban-hosts bsd fail2ban gplv2 ids intrusion-detection intrusion-prevention ips linux macos python security


Mailpile : A free & open modern, fast email client with user-friendly encryption and privacy features
author: mailpile
created: 2011-10-30 23:45:22
e-mail imap-client pgp search-engine security smtp-client tags python


CryptandDrop : A program to encrypt/decrypt files and send them to Dropbox
author: Donearm
created: 2011-11-08 12:51:33
cryptography dropbox privacy python security


UICKeyChainStore : UICKeyChainStore is a simple wrapper for Keychain on iOS, watchOS, tvOS and macOS. Makes using Keychain APIs as easy as NSUserDefaults.
author: kishikawakatsumi
created: 2011-11-20 00:35:49
keychain security touch-id objective-c


wordpress-https : WordPress HTTPS is intended to be an all-in-one solution to using SSL on WordPress sites.
author: mvied
created: 2011-12-15 03:05:45
encryption https php security shared-ssl ssl wordpress wordpress-https wordpress-plugin


Tor2web : Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
author: globaleaks
created: 2011-12-17 15:14:02
aaron-swartz anonimous-proxies confidentiality digital-human-rights freedom-of-information https networking onion-service privacy proxy python security socks5 streaming tor transparency twisted


PasswordPusher : 🔐 PasswordPusher is an application to securely communicate passwords over the web. Passwords automatically expire after a certain number of views and/or time has passed.
author: pglombardo
created: 2011-12-28 17:35:19
communicate-passwords docker-container heroku kubernetes openshift-templates password password-expiration password-pusher password-safety ruby security javascript


owtf : Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
author: owtf
created: 2012-01-19 06:42:44
framework kali-linux owasp owtf pentest python security web-application-security


pac4j : Security engine for Java (authentication, authorization, multi frameworks): OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
author: pac4j
created: 2012-01-28 17:04:12
authentication authorization cas dropwizard j2e java jax-rs jwt ldap oauth openid-connect play-framework ratpack saml security shiro sparkjava spring-mvc spring-security vertx


helmet : Help secure Express apps with various HTTP headers
author: helmetjs
created: 2012-02-01 22:54:45
http-headers javascript middleware security


apparmor-profiles : My local apparmor profiles for binary or dangerous apps
author: mk-fg
created: 2012-02-05 07:00:16
apparmor-profile desktop linux sandboxing security shell


dotdotpwn : DotDotPwn - The Directory Traversal Fuzzer
author: wireghoul
created: 2012-02-10 01:28:05
fuzzer penetration-testing perl security traversal


semantic-guesser : Training and testing of linguistic passwords models.
author: vialab
created: 2012-02-14 14:27:12
cracking nlp passwords pcfg security python


IPBan : IPBan Monitors failed logins and bans ip addresses on Windows, Linux and MAC. Highly configurable, lean and powerful. Download binaries from releases or here: -->
author: DigitalRuby
created: 2012-02-20 17:21:34
automation block configuration csharp desktop firewall free hack intruder ipban linux protocol rdp remote remote-desktop script security service visual-studio windows c#


OnionBrowser : An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
author: OnionBrowser
created: 2012-02-24 08:50:51
anonymity browser ios mobile mpl objective-c onion privacy security tor tor-network web-browser


drozer : The Leading Security Assessment Framework for Android.
author: mwrlabs
created: 2012-02-24 15:02:31
android drozer java mobile mwr pentesting security python


nmap : Nmap - the Network Mapper. Github mirror of official SVN repository.
author: nmap
created: 2012-03-09 14:47:43
asynchronous c-plus-plus libpcap linux lua machine-learning netcat network-discovery nmap osx pcre ping port-scanner security service-discovery socket windows c


RootTheBox : A Game of Hackers (CTF Scoreboard & Game Manager)
author: moloch--
created: 2012-03-11 06:30:48
ctf scoring-engine security html


notable : Notable - a simple note taking application
author: jmcfarlane
created: 2012-03-22 09:15:58
golang linux macos notes security go


find-sec-bugs : The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)
author: find-sec-bugs
created: 2012-05-17 04:07:57
bytecode code-analysis cwe findbugs java owasp security security-audit static-analysis taint-analysis


dive : Start programs inside unshare/lxc namespaces easily using UNIX sockets + easy access to capabilities, namespaces, chroot and others.
author: vi
created: 2012-05-19 01:03:20
capabilities chroot linux namespaces prctl security setns c


spring-security-pac4j : pac4j security library for Spring Security: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
author: pac4j
created: 2012-05-20 14:05:43
authentication authorization cas facebook java jwt ldap login logout mongodb oauth openid-connect saml security social-login spring-boot spring-security sql twitter


fugacious : OSSSM (awesome). Open source short-term secure messaging
author: fugacious
created: 2012-05-22 05:32:23
keys password-safety passwords ruby secret security security-tools


fake-admin-honeypot-V1.1 : :honey_pot: New Honeypot Version: 1.2! :honeybee: This pH7CMS module is a simple but effective honeypot fake Admin CP for the security of your website. Honeypot for the attackers!
author: pH-7
created: 2012-05-22 12:49:14
admin admin-honeypot fake-admin-panel hacking honeypot honeypot-fake-admin honeypots ph7cms security php


Whonix : Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP. https://www.whonix.org
author: Whonix
created: 2012-05-28 22:03:09
anonymity debian dns-leak-prevention encryption hide-real-ip i2p irc open-source physical-isolation privacy-protection security tor-network virtualization shell


invisible_captcha : :honey_pot: Unobtrusive and flexible spam protection for Rails apps
author: markets
created: 2012-06-06 14:30:32
anti-spam captcha honeypot rails security ruby


latte : ☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.
author: nette
created: 2012-06-20 22:59:09
content-aware latte nette nette-framework php safety security security-hole template-engine xss


radare2 : unix-like reverse engineering framework and commandline tools
author: radare
created: 2012-07-03 07:42:26
analysis c commandline forensics radare2 reverse-engineering security unix


moloch : Moloch is an open source, large scale, full packet capturing, indexing, and database system.
author: aol
created: 2012-07-06 16:10:55
big-data c javascript network-monitoring nsm packet-capture pcap security


kekkan : Kekkan is a parser for NIST Version 2 CVE and CPE XML files.
author: hammackj
created: 2012-07-09 22:42:19
nvd2 ruby security xml-parser


wpscan : WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.
author: wpscanteam
created: 2012-07-11 20:27:47
hacking-tool security security-scanner wordpress wpscan ruby


buji-pac4j : pac4j security library for Shiro: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
author: bujiio
created: 2012-07-13 18:18:17
authentication authorization cas facebook java jwt ldap login logout mongodb oauth openid-connect saml security shiro social-login sql twitter


StreamFUZZ : A RTSP based Straem Fuzzer in Python
author: rabimba
created: 2012-08-12 18:45:54
security python


HTTPSMocker : Https to Http Mocking Server in Python. Written to handle Self Signed Server Cerifictae issues in Selenium. Can also be used for all other purposes like penetration testing (wink)
author: rabimba
created: 2012-08-12 18:50:52
security python


suricata : Suricata git repository maintained by the OISF
author: OISF
created: 2012-08-14 08:30:06
ids ips network-monitoring nsm security c


Seccubus : Easy automated vulnerability scanning, reporting and analysis
author: schubergphilis
created: 2012-08-23 10:19:18
analysis filters medusa nessus nikto nmap repeated-scans seccubus security ssllabs testssl vulnerability-detection vulnerability-management javascript


hulk : HULK DoS tool ported to Go with some additional features.
author: grafov
created: 2012-08-24 10:40:27
dos golang hacking http python security utilities web go


GlobaLeaks : GlobaLeaks - The Open-Source Whistleblowing Software
author: globaleaks
created: 2012-08-30 18:07:46
aes-encryption angularjs anonymity anti-corruption argon2 bootstrap digital-human-rights https letsencrypt libsodium openpgp opensource python security sqlalchemy tor transparency twisted usability whistleblowing


DependencyCheck : OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
author: jeremylong
created: 2012-09-03 20:43:30
ant-task build-tool gradle-plugin jenkins-plugin maven-plugin security security-audit software-composition-analysis vulnerability-detection java


force-user-login : This is a very small WordPress plugin that forces users to login before viewing any content.
author: herrbischoff
created: 2012-10-08 12:29:17
php security wordpress wordpress-plugin


SimpleAcl : Simple ACL for PHP
author: alexshelkov
created: 2012-10-19 18:36:18
acl auth authorization permissions php security


DreamCatcher : DNS Monitoring Suite
author: reyjrar
created: 2012-11-04 19:53:13
dns monitoring passive-dns perl security


play-pac4j : Security library for Play framework 2 in Java and Scala: OAuth, CAS, SAML, OpenID Connect, LDAP, JWT...
author: pac4j
created: 2012-11-10 08:19:26
authentication authorization cas facebook java jwt ldap login logout mongodb oauth openid-connect play-framework saml scala security social-login sql twitter


arcreactor : open-source intelligence gathering for SIEMs <3
author: deadbits
created: 2012-12-09 21:15:59
data-collection osint python security


drozer-agent : The Android Agent for the Mercury Security Assessment Framework.
author: mwrlabs
created: 2012-12-13 17:17:59
android drozer java mobile mwr pentesting security


Captcha : PHP Captcha library
author: Gregwar
created: 2012-12-27 12:01:19
anti-bot anti-spam bots captcha php security


Palioxis : Linux self-destruction utility
author: deadbits
created: 2012-12-31 00:30:16
linux privacy python-script security security-hardening python


duoauth : PHP Library for easy integration with Duo Security's Two-Factor REST API
author: enygma
created: 2012-12-31 18:05:01
api api-client duo-security security security-tools php


flask-xsrf : flask extension for defending against cross-site request forgery attacks (XSRF/CSRF)
author: gregorynicholas
created: 2013-01-01 01:21:46
flask python security


pypacker : :package: The fastest and simplest packet manipulation lib for Python
author: mike01
created: 2013-01-06 02:36:29
arp bgp can ethernet ieee80211 intercept-packets ip network nfqueue packet-creation packets parsing pcap protocol python security socket tcp testing udp


Pkcs11Interop : Managed .NET wrapper for unmanaged PKCS#11 libraries
author: Pkcs11Interop
created: 2013-01-09 20:34:33
crypto cryptography hsm pkcs pkcs11 security smartcard c#


Circlean : USB key cleaner
author: CIRCL
created: 2013-01-16 14:21:12
security usb-cleaner usb-devices usb-keys python


maz : Malware Analysis Zoo
author: deadbits
created: 2013-01-22 19:04:12
malware-analysis malware-analyzer malware-research ruby security


LoginSecurity-2 :
author: lenis0012
created: 2013-01-26 11:44:08
authentication bukkit java minecraft security


security-checker : PHP frontend for security.symfony.com
author: sensiolabs
created: 2013-02-01 10:45:33
composer php security


syscall_limiter : Start Linux programs with only selected syscalls enabled (libseccomp-based)
author: vi
created: 2013-02-04 22:37:54
libseccomp linux seccomp security syscalls c


MifareClassicTool : An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.
author: ikarus23
created: 2013-02-12 15:39:03
android android-nfc mifare mifare-classic nfc rfid rfid-tags security java


yawast : The YAWAST Antecedent Web Application Security Toolkit
author: adamcaudill
created: 2013-02-28 04:25:57
appsec security security-audit security-scanner ssl tls ruby


yubikey : PHP library to interface with the Yubikey REST API
author: enygma
created: 2013-03-01 20:18:02
php security token yubikey


ScanX : ScanX (Scanner for OS X) is a Cocoa framework for automating analysis and evaluation workflows
author: alessiomaffeis
created: 2013-03-06 11:46:35
analysis assessment automated-analysis evaluation framework macos scanning security objective-c


iOScanX : iOScanX (iOS Application Scanner for OS X) is a Cocoa application for semi-automated iOS app analysis and evaluation
author: alessiomaffeis
created: 2013-03-06 12:40:39
analysis application automated-analysis automation ios macos scanning security workflow objective-c


AuthMeReloaded : The best authentication plugin for the Bukkit/Spigot API!
author: AuthMe
created: 2013-03-09 00:21:39
authentication authme bukkit bukkit-plugin bukkitdev craftbukkit curseforge database java minecraft minecraft-admin minecraft-plugin security spigot spigot-plugin


railsgoat : A vulnerable version of Rails that follows the OWASP Top 10
author: OWASP
created: 2013-03-19 21:03:36
appsec owasp-top rails ruby ruby-on-rails security vulnerabilities html


conpot : ICS/SCADA honeypot
author: mushorg
created: 2013-03-20 13:04:04
honeypot ics python scada security


elkarbackup : Open source backup solution for your network
author: elkarbackup
created: 2013-03-20 18:33:44
backup elkarbackup rsnapshot rsync rsync-backups security ssh web webui javascript


PasswordStrengthBundle : Symfony Password strength and blacklisting validator bundle
author: rollerworks
created: 2013-03-21 10:25:46
blacklist bundle password password-strength php security symfony symfony-bundle


CameraV : CameraV: InformaCam Default Android App
author: guardianproject
created: 2013-03-25 07:13:40
camera encryption evidence privacy security java


captcha : Captcha for Laravel 5
author: mewebstudio
created: 2013-03-27 00:01:06
captcha laravel php security


LoginGateBundle :
author: anyx
created: 2013-03-28 19:32:16
brute-force-attacks security symfony-bundle php


Blowyaml : Blowfish encryption of passwords' file (in YAML)
author: Donearm
created: 2013-03-29 13:36:58
cryptography privacy python security yaml


JCAlgTest : Automated testing tool for algorithms from JavaCard API supported by particular smart card. Performance testing of almost all available methods. The results for more than 60+ cards.
author: crocs-muni
created: 2013-04-01 18:14:24
cryptography javacard security smartcard html


fsl-test-bench : Fedora Security Lab Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.
author: fabaff
created: 2013-04-02 13:11:00
ansible fedora fedora-security-lab pentesting playground security vulnerable shell


scanssh : Fast SSH server and open proxy scanner
author: ofalk
created: 2013-04-03 15:11:06
scan-tool security ssh c


dawnscanner : Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
author: thesp0nge
created: 2013-04-04 13:06:48
codereview cybersecurity hanami padrino rails ruby security security-audit sinatra vulnerabilities


scapy-nflog-capture : Driver for scapy to allow capturing packets via Linux NFLOG interface
author: mk-fg
created: 2013-04-09 16:08:29
cffi linux module netfilter networking nflog python scapy security sniffer


ApacheShiro : :key: Using Apache Shiro JDBC Realm with MySQL Database
author: hakdogan
created: 2013-04-16 15:14:30
security shiro html


nmap4j : A Java Nmap wrapper
author: narkisr
created: 2013-04-22 01:22:47
java java-nmap-wrapper nmap security


evilgrade :
author: infobyte
created: 2013-04-22 16:08:48
evilgrade fake payload penetration pentest security update perl


termineter : Smart Meter Security Testing Framework
author: securestate
created: 2013-04-24 14:39:20
python security smart-meters


dirsearch : Web path scanner
author: maurosoria
created: 2013-04-30 15:57:40
bruteforce dirbuster dirsearch fuzzer fuzzing hacking pentest python security


DVWA : Damn Vulnerable Web Application (DVWA)
author: ethicalhack3r
created: 2013-05-01 13:03:10
dvwa hacking infosec php security sql-injection training


evolve_cfengine_freelib : Evolve Thinking's free Cfengine promise library.
author: neilhwatson
created: 2013-05-12 16:45:22
cfengine cfengine-library security perl


kicomav : KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.
author: hanul93
created: 2013-05-15 22:16:05
antivirus malware python security virus


quick-secure : Quickly secure UNIX/Linux systems
author: marshyski
created: 2013-05-16 06:19:27
docker docker-security linux security security-hardening shell


expose : An Intrusion Detection System library loosely based on PHP IDS
author: enygma
created: 2013-05-16 23:17:45
intrusion-detection php phpids security


Flask-HTTPAuth : Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes
author: miguelgrinberg
created: 2013-05-18 05:10:52
authentication flask flask-httpauth python security tokens


Cookies help us deliver our services. By using our services, you agree to our use of cookies Learn more