auzias

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

cryptpad

Collaborative office suite, end-to-end encrypted and open-source.

YaraHunter

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

mitra

A generator of weird files (binary polyglots, near polyglots, polymocks...)

Fork-Awesome

DEPRECATED. A fork of the iconic font and CSS toolkit

cdebug

cdebug - a swiss army knife of container debugging

sockdump

Dump unix domain socket traffic with bpf

guac

GUAC aggregates software security metadata into a high fidelity graph database.

osv-schema

Open Source Vulnerability schema.

osv.dev

Open source vulnerability DB and triage service.

Awesome-RCE-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

volatility2-profiles

Memory mapping profiles for forensic analysis using volatility 2

barrier

Open-source KVM software

synergy

Synergy lets you share one mouse and keyboard between multiple computers on Windows, macOS and Linux.

vsaq

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

xpid

Linux Process Discovery. C Library, Go bindings, Runtime.

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

grype

A vulnerability scanner for container images and filesystems

fq

jq for binary formats - tool, language and decoders for working with binary and text formats

doctree

First-class library documentation for every language (based on tree-sitter), with symbol search & more. Lightweight single binary, run locally or self-host. Surfaces usage examples via Sourcegraph.

libreddit

Private front-end for Reddit

ssh-mitm

SSH-MITM - ssh audits made simple

rss-bridge

The RSS feed for websites missing it

log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

log4shell-vulnerable-app

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

marshalsec

fave

Search for vulnerabilities and exposures while filtering based on age, keywords, and other parameters.

naming-cheatsheet

Comprehensive language-agnostic guidelines on variables naming. Home of the A/HC/LC pattern.

innernet

A private network system that uses WireGuard under the hood.

kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.