安全 · GitHub

完全免费 · 开源 · 数据自主的极简记账工具

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security audit reports.

🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Cracking | Part of MoMo Ecosystem

Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.

• Hierarchical checklist — content is organised in four levels, Platform → Category → Technology → Check, so the tool works like a real assessment framework rather than a flat list. Expand/collapse categories and technologies, with item counts on every section and one-click Expand all / Collapse all.
• Global search — press ⌘K / Ctrl+K from any page to search across platforms, categories, technologies, checks, descriptions, tags, tools, and references. Selecting a result jumps to it, auto-expands the right sections, and highlights the item.

功能全面、开源且注重隐私的 Android 电子邮件应用，采用 Fair-code 授权

• 100% open source
• Privacy oriented

Simple random DNS, HTTP/S internet traffic noise generator in a Docker container

• Crawls up to 10,000 top sites sourced from CrUX top lists, refreshed monthly.
• Fetches and rotates real User-Agent strings weekly from useragents.me.

LotL RMM

• Fast Astro-powered static site at lolrmm.io – browse the catalog, filter by platform, search by name/domain/artifact, and explore tool details. Catalog content is rendered as static HTML; interactive search and filters use JavaScript
• Catalog snapshot (2026-10-06): 358 entries classified as 261 RMM and 97 RAT, 724 distinct recorded domain patterns, and 145 tools with certificate evidence. See the live site for current totals; catalog classification alone does not establish malicious use

A curated list for Awesome Kubernetes Security resources

Bug Bounty Methodology

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

A OSINT tool to obtain a target's phone number just by having his email address

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• Security Data Lake: Normalize unstructured security logs into a structured realtime data lake in your AWS account.
• Collect All Your Logs: Integrates out of the box with 50+ sources for security logs and can easily be extended with custom sources.

🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件