安全 · GitHub

This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommendations of multiple cyber security researchers at Microsoft. These tools were created with a small to medium size enterprise environment in mind as smaller organizations do not always have the type of funding available to overly spend on security. The goal of this project is to help add value to an smaller organizations security by creating more visibility for the average IT Administrator. Organizations with 1,000’s of devices may find that this entire suite does not apply to them.

Browser extension that protects you from phishing and malicious websites.

OSSEC 是一个开源的基于主机的入侵检测系统，可执行日志分析、文件完整性检查、策略监控、Rootkit 检测、实时告警和主动响应。

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Official GitHub Action for OpenSSF Scorecard.

The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.

• Cross site scripting
• OS command injection

Open Source Security Events Metadata (OSSEM)

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

PCI-DSS compliant Debian 12/13 hardening

Authentication, authorization, traceability and auditability for SSH accesses.

ModSecurity v3 Nginx Connector

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/

Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.