verifin
LumiDesk
185étoiles
完全免费 · 开源 · 数据自主的极简记账工具
Sécurité · GitHub
Trouvez des outils de détection des vulnérabilités et de protection des systèmes et de la vie privée.
Projets GitHub utiles
2,880 projets
lunasec
lunasec-io
1,473étoiles
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Opengrep-Studio
Lyfxxk
52étoiles
Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security audit reports.
MoMo
M0M0Sec
33étoiles
🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Cracking | Part of MoMo Ecosystem
PentestingChecklist
m14r41
91étoiles
Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.
- Hierarchical checklist — content is organised in four levels, Platform → Category → Technology → Check, so the tool works like a real assessment framework rather than a flat list. Expand/collapse categories and technologies, with item counts on every section and one-click Expand all / Collapse all.
- Global search — press ⌘K / Ctrl+K from any page to search across platforms, categories, technologies, checks, descriptions, tags, tools, and references. Selecting a result jumps to it, auto-expands the right sections, and highlights the item.
FairEmail
M66B
4,773étoiles
Application de messagerie complète, open source et Fair-code pour Android, respectueuse de la vie privée
- 100% open source
- Privacy oriented
sopa
Macmod
64étoiles
A practical client for ADWS in Golang.
noisy
madereddy
108étoiles
Simple random DNS, HTTP/S internet traffic noise generator in a Docker container
- Crawls up to 10,000 top sites sourced from CrUX top lists, refreshed monthly.
- Fetches and rotates real User-Agent strings weekly from useragents.me.
LOLRMM
magicsword-io
417étoiles
LotL RMM
- Fast Astro-powered static site at lolrmm.io – browse the catalog, filter by platform, search by name/domain/artifact, and explore tool details. Catalog content is rendered as static HTML; interactive search and filters use JavaScript
- Catalog snapshot (2026-10-06): 358 entries classified as 261 RMM and 97 RAT, 724 distinct recorded domain patterns, and 145 tools with certificate evidence. See the live site for current totals; catalog classification alone does not establish malicious use
awesome-k8s-security
magnologan
2,009étoiles
A curated list for Awesome Kubernetes Security resources
SOC-Log-Analysis-Datasets
mahialjaber
36étoiles
Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIEM ingestion, threat hunting, and log analysis.
- 🎯 Targeted, not random — every file is built around specific, well-known attack techniques (SQLi, XSS, brute force, C2 beaconing, DNS tunneling, IAM abuse, and more), not random noise.
- 🌍 Five real-world domains — Applications, Cloud, Email & DLP, Endpoints, and Network, so you can practice across the environments a real SOC actually monitors.
Codex-Prompt
Mai-xiyu
99étoiles
Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and reverse engineering. | 面向 Codex 与 LLM 的理性工程系统提示词：强调准确性、软件工程、AI、网络安全、漏洞研究与逆向工程。
Mailpile
mailpile
8,807étoiles
Un client de messagerie moderne, rapide, gratuit et ouvert, avec un chiffrement facile à utiliser et des fonctionnalités de confidentialité
recheck
makenowjust-labs
306étoiles
The trustworthy ReDoS checker
malwaredb-rs
malwaredb
65étoiles
MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery
- Store malicious, benign, or unknown file samples.
- Labels, build your own custom hierarchical taxonomy.
Malware-Feed
MalwareSamples
364étoiles
Bringing you the best of the worst files on the Internet.
Bug-Bounty-Methodology
Maniesh-Neupane
339étoiles
Bug Bounty Methodology
mcpsec
manthanghasadiya
26étoiles
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
marcellelee.github.io
marcellelee
27étoiles
Cybersecurity Researcher, Consultant, Educator, Author
invisible_captcha
markets
1,253étoiles
🍯 Unobtrusive and flexible spam protection for Rails apps
email2phonenumber
martinvigo
2,829étoiles
A OSINT tool to obtain a target's phone number just by having his email address
Fenjing
Marven11
1,319étoiles
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
matano
matanolabs
1,708étoiles
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
- Security Data Lake: Normalize unstructured security logs into a structured realtime data lake in your AWS account.
- Collect All Your Logs: Integrates out of the box with 50+ sources for security logs and can easily be extended with custom sources.
matecloud
mateaix
1,711étoiles
🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件