セキュリティ · GitHub

OSコマンドインジェクションを自動で悪用するオールインワンツール。

• Four injection techniques - results-based, boolean-based, time-based and file-based, chosen with --technique or by the type they report with --type - see techniques for what each one asks of a target.
• Out-of-band, when nothing comes back at all - --oob proves execution and carries the command's output over HTTP/S or DNS, reaching the server through whichever client the target happens to have - see out-of-band client for the ones it tries and how to pin one.

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

• Accepts an APK up to 200 MB by default and validates its ZIP structure before queuing a background scan. The page returns immediately; the scan status dock follows navigation across the app.
• Creates a CycloneDX SBOM with Syft when available.

The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.

非常に脆弱なWebアプリケーション（DVWA）

Venom - A Multi-hop Proxy for Penetration Testers

An easy to install, high-performance, zero maintenance proxy to run an encrypted DNS server.

World's first Face Authentication enabled MacOS App-locker, completely free and open-source. Unlock your Mac apps using Face , TouchID or password. Completely local and encrypted - your data never leaves your Mac

• App Locking — Lock any installed app. FaceGate intercepts launches in real-time and prevents access until authenticated.
• On-Device Face Recognition — Software-based face embedding pipeline running entirely on your Mac via the Apple Neural Engine. No cloud, no data leaving your device.

eladmin JPA版：Spring Boot 2.7.18、JPA、Spring Security、Redis、Vueを基盤とした、フロントエンドとバックエンドを分離した管理システムです。モジュール分割方式で開発され、RBACによる権限制御に対応しています。データ辞書、データ権限管理、フロントエンドとバックエンドのコードのワンクリック生成、動的ルーティングをサポートします。

Ah shhgit！コード内のシークレットを検出します。GitHub、GitLab、Bitbucket のリポジトリ向けシークレット検出ツールです。

FireDragon is a cross-platform, feature-rich and privacy-focused web browser (mirrored from GitLab)

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Improve your security and privacy by blocking ads, tracking and malware domains.

IAGA Sentinel sits next to your AI agents and answers the one question the agent itself cannot.