vps-audit
nuver-labs
3,286星标+524小时
用于 Linux 服务器安全与性能审计及基础设施监控的轻量级、无依赖 Bash 脚本。
安全 · GitHub
探索漏洞扫描、系统防护和隐私保护工具。
实用 GitHub 项目
2,879 个项目
openfga
openfga
6,135星标+524小时
面向开发者构建、受 Google Zanzibar 启发的高性能灵活授权/权限引擎。
- ⚡ High-performance, developer-friendly APIs (HTTP & gRPC)
- 🔌 Flexible storage backends (In-Memory, PostgreSQL, MySQL, SQLite beta)
scorecard
ossf
5,831星标+524小时
OpenSSF Scorecard - 开源软件的安全健康指标
NetExec
Pennyw0rth
5,999星标+524小时
网络执行工具
interactsh
projectdiscovery
4,632星标+524小时
用于收集带外（OOB）交互的服务器和客户端库
- DNS/HTTP(S)/SMTP(S)/LDAP Interaction
- IPv4 and IPv6 support
portmaster
safing
14,062星标+524小时
🏔 热爱自由 - ❌ 阻止大规模监控
- Monitor All Network Activity
- Full Control: Block Anything
awesome-ai-security-tools
scadastrangelove
1,745星标+524小时
A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.
fscan
shadow1ng
14,787星标+524小时
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
certificates
smallstep
9,065星标+524小时
🛡️ 用于安全自动化证书管理的私有证书颁发机构（X.509 和 SSH）与 ACME 服务器，让你可以随处使用 TLS，并为 SSH 使用单点登录（SSO）。
cybergym
sunblaze-ucb
1,035星标+524小时
CyberGym is a large-scale, high-quality cybersecurity evaluation framework designed to rigorously assess the capabilities of AI agents on real-world vulnerability analysis tasks.
- FAQ.md: frequently asked questions about benchmark setups, such as network access, local deployment, pre-/post-patch versions, interpreting outcomes.
- SUBMISSION.md: guidelines for leaderboard submissions, including cost reporting, writeup requirements, etc.
tutanota
tutao
8,157星标+524小时
Tuta 是一款高度重视安全与隐私的电子邮件服务，可让你在所有设备上加密邮件、联系人和日历条目。
wgcf
ViRb3
8,896星标+524小时
🚤 Cloudflare Warp 的跨平台非官方 CLI
- Register new account
- Change license key to use existing Warp+ subscription
systeminformer
winsiderss
16,478星标+524小时
一款免费、强大的多用途工具，可帮助你监控系统资源、调试软件并检测恶意软件。由 Winsider Seminars & Solutions, Inc. 呈献 @ https://windows-internals.com
- A detailed overview of system activity with highlighting.
- Graphs and statistics allow you quickly to track down resource hogs and runaway processes.
Betterfox
yokoffing
10,987星标+524小时
Firefox user.js，助你获得更佳的隐私保护和安全性。让你喜爱的浏览器更上一层楼。
zeek
zeek
8,224星标+524小时
Zeek 是一个强大的网络分析框架，与您熟悉的典型 IDS 有很大不同。
- In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at the application layer.
- Adaptable and Flexible Zeek's domain-specific scripting language enables site-specific monitoring policies and means that it is not restricted to any particular detection approach.
Cybermes
Zyrexnn
1,022星标+524小时
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
- Native Go Toolchain: Zero-overhead compiled utilities for output stream filtering (smart_pipe), credential scanning (secret_scan), offline knowledge retrieval (search_knowledge), and report aggregation (aggregate_reports).
- Model Context Protocol (MCP): Native Go MCP server (cybermes-mcp) exposing security tools and context providers to AI assistants like Claude Desktop, Cursor, Windsurf, and VS Code / Cline.
awesome-list
0xor0ne
4,281星标+424小时
Cybersecurity oriented awesome list
pentest-ai-agents
0xSteph
2,437星标+424小时
将 Claude Code 转变为进攻性安全研究助手。专用 AI 子智能体可协助规划经授权的渗透测试项目、分析侦察结果、研究漏洞利用方法、构建检测规则、审核 STIG，并撰写报告。
Snitch
aixisstudio
793星标+424小时
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
- Force Graph - Live node graph — your machine at the center, every connection as a node
- World Map - Geolocated IPs with animated arcs on an interactive globe
ai-jailbreaks
Alejandros17487
439星标+424小时
AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama Modelfiles. Built for AI security research and red-team testing.
paranoia
Altumptic
59星标+424小时
开放式逆向分析，支持 PE/ELF/Mach-O、x86/x64/AArch64、图和伪代码。引擎使用 Rust 编写，不联网。支持桌面端、CLI 和浏览器。
- Formats - PE / PE32+ (.NET detection, forwarders, TLS callbacks, .pdata with chained unwind info), ELF (PIE, PLT/GOT imports, symbol versions), Mach-O (universal binaries, dyld bind opcodes, chained fixups, export trie)
- Architectures - x86 and x86-64 (iced-x86), AArch64, ARM32 and Thumb-2 (yaxpeax-arm), RISC-V RV32/RV64GC, MIPS32/64 and PowerPC 32/64 (own decoders)
openvpn-install
angristan
16,184星标+424小时
Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS, Arch Linux and more
- Installs and configures a ready-to-use OpenVPN server
- CLI interface for automation and scripting (non-interactive mode with JSON output)
wireguard-install
angristan
11,410星标+424小时
WireGuard VPN installer for Linux servers
artifact-keeper
artifact-keeper
1,283星标+424小时
Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.
- 45+ Package Formats - Native protocol support for Maven, PyPI, NPM, Docker/OCI, Cargo, Go, Helm, and 38 more
- WASM Plugin System - Extend with custom format handlers via WebAssembly (WIT-based, Wasmtime runtime)