nobleXu

in-toto

in-toto is a framework to protect supply chain integrity.

ray

Ray is a unified framework for scaling AI and Python applications. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

hyper

HTTP/2 for Python.

npmgraph.an

2d visualization of npm

notary

Notary is a project that allows anyone to have trust over arbitrary collections of data

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

pipeline

A cloud-native Pipeline resource.

envoy

Cloud-native high-performance edge/middle/service proxy

fancyss

fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.

marshalsec

hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

nocode

The best way to write secure and reliable applications. Write nothing; deploy nowhere.

runc

CLI tool for spawning and running containers according to the OCI specification

src

日常src平台域名收集

Github-Monitor

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

etcd

Distributed reliable key-value store for the most critical data of a distributed system

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

nabla-measurements

Measurements and comparisons of nabla containers

oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

kubernetes

Production-Grade Container Scheduling and Management

dive

A tool for exploring each layer in a docker image

runnc

OCI-interfacing Container runtime for Nabla Containers

kritis

Deploy-time Policy Enforcer for Kubernetes applications

functionsimsearch

Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.

grafeas

Artifact Metadata API

jQuery-File-Upload

File Upload widget with multiple file selection, drag&drop support, progress bar, validation and preview images, audio and video for jQuery. Supports cross-domain, chunked and resumable file uploads. Works with any server-side platform (Google App Engine, PHP, Python, Ruby on Rails, Java, etc.) that supports standard HTML form file uploads.