セキュリティ · GitHub

Full-featured proxy, powered by sing-box, xray and mihomo (Clash.Meta)

• Three engines, one per server — sing-box, xray-core and mihomo ship together and Noctis picks the one each server needs: sing-box runs every protocol it reads, xray-core is the only engine that builds xhttp, and mihomo runs sing-box's set without ShadowTLS.
• Servers from share links, QR, or subscription URLs — Paste vless://, vmess://, trojan://, ss://, hysteria2://, tuic://, wireguard:// — or scan a QR code. Subscription URLs auto-refresh on a schedule.

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

ClearURLs は新しい WebExtensions 技術を基盤とするアドオンで、URL からトラッキング要素を自動的に削除し、プライバシーの保護に役立ちます。

• Removes tracking from URLs automatically in the background
• Blocks some common ad domains (optional)

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

OSコマンドインジェクションを自動で悪用するオールインワンツール。

• Four injection techniques - results-based, boolean-based, time-based and file-based, chosen with --technique or by the type they report with --type - see techniques for what each one asks of a target.
• Out-of-band, when nothing comes back at all - --oob proves execution and carries the command's output over HTTP/S or DNS, reaching the server through whichever client the target happens to have - see out-of-band client for the ones it tries and how to pin one.

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

• Accepts an APK up to 200 MB by default and validates its ZIP structure before queuing a background scan. The page returns immediately; the scan status dock follows navigation across the app.
• Creates a CycloneDX SBOM with Syft when available.

The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.

Android security insights in full spectrum.

• APK decompilation via JADX (Windows, Linux, macOS, Docker)
• AndroidManifest.xml analysis — permissions, exported components, misconfigurations

Venom - A Multi-hop Proxy for Penetration Testers

World's first Face Authentication enabled MacOS App-locker, completely free and open-source. Unlock your Mac apps using Face , TouchID or password. Completely local and encrypted - your data never leaves your Mac

• App Locking — Lock any installed app. FaceGate intercepts launches in real-time and prevents access until authenticated.
• On-Device Face Recognition — Software-based face embedding pipeline running entirely on your Mac via the Apple Neural Engine. No cloud, no data leaving your device.

eladmin JPA版：Spring Boot 2.7.18、JPA、Spring Security、Redis、Vueを基盤とした、フロントエンドとバックエンドを分離した管理システムです。モジュール分割方式で開発され、RBACによる権限制御に対応しています。データ辞書、データ権限管理、フロントエンドとバックエンドのコードのワンクリック生成、動的ルーティングをサポートします。

εxodus Android application

ffffffff0x チームが運営するセキュリティ知識フレームワーク。Web セキュリティ、制御システムのセキュリティ、フォレンジック、インシデント対応、ブルーチームのインフラ構築、ポストエクスプロイテーション、Linux セキュリティ、各種ターゲットマシンの writeup などを扱います。

FireDragon is a cross-platform, feature-rich and privacy-focused web browser (mirrored from GitLab)

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。