安全 · GitHub

红队测试和渗透测试的工具与技术

适用于 Windows、macOS 和 Linux 的 Cryptomator：以安全的客户端加密保护你的云存储，确保隐私并让你掌控自己的数据。

• Works with Dropbox, Google Drive, OneDrive, MEGA, pCloud, ownCloud, Nextcloud and any other cloud storage service which synchronizes with a local directory
• Open Source means: No backdoors, control is better than trust

通过互联网在设备之间直接发送文件，无需云存储，也没有文件大小限制。

• No accounts — no signup, no login, no email address required
• No cloud storage — files go directly between devices; nothing is ever uploaded or stored on a server

ESP32-BlueJammer（蓝牙干扰器、BLE 干扰器、WiFi 干扰器、遥控干扰器）会干扰 2.4GHz 通信。它使用 ESP32 和 nRF24 模块产生噪声和不必要的数据包，干扰通信设备之间的连接，使设备无法正常工作。适用于受控干扰和安全测试。

OWASP Juice Shop：可能是最现代、最精密的不安全 Web 应用程序

Take a gander at any file. Offline, zero-permission Android viewer for PDF, Word, Excel, PowerPoint, ODT, RTF, ZIP, STL, photos, video, audio, Markdown and code.

• One viewer for everything: documents, spreadsheets, slides, images, video, audio, Markdown, code, 3D models
• Opens .zip files: a zip lists like a folder, and each file in it opens in its usual viewer, read straight out of the archive with nothing unzipped to the phone

Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.

• Hidden by default. Hidden Fields stay as dots until you choose Show. Seed Phrases and Private Keys are encrypted a second time, under a key that unlocking and Touch ID don't open, so showing one always takes your Master Password.
• Careful on screen shares. Asks the OS to keep the window out of captures (best effort) and covers it when a known screen-sharing or recording app is running; meetings inside a web browser aren't detected.

面向编程智能体的开源 AI 代码审查工具。它会在 Claude Code、Codex、Cursor 和 Cline 中，由独立的审查器检查智能体编写的每项更改，确保在你推送前完成审查。无需单独的账户或密钥。

🔒 汇集并扩展来自多个精心整理来源的 hosts 文件。可按需选择色情、社交媒体及其他类别的扩展。

🔍 面向逆向工程师、程序员以及在凌晨 3 点工作时珍视视网膜的人们的十六进制编辑器。

• Patch management
• Infinite Undo/Redo

面向人类与智能体构建的数据库治理——管控所有主流数据库的变更与访问。

SafeLine 是一款可自行部署的 WAF（Web 应用防火墙）/反向代理，用于保护 Web 应用免受攻击和漏洞利用。

• It defenses for all of web attacks, such as SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.
• Defend your web apps against DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.

基于 eBPF 的网络、安全与可观测性

极易受攻击的 Web 应用程序（DVWA）