information-security

There are 99 repositories under information-security topic.

smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
footprinting osint threatintel python infosec intelligence-gathering osint-reconnaissance pentesting threat-intelligence security-tools information-gathering cybersecurity cti osint-framework attacksurface osint-tool hacking information-security recon
Language:Python 11789
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
7997
rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security blueteam red-team windows osx forensics hacking-simulator privilege-escalation-exploits hacktoberfest hacktoberfest2021
Language:CSS 5362
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti cybersecurity fraud-detection fraud-prevention threat-analysis information-security information-sharing threat-intelligence threat-intelligence-platform intelligence threat-intel
Language:PHP 5009
Cheatsheet-God
OlivierLaflamme / Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
awesome cheatsheet cheatsheet-god hacking hacking-code hacking-tool howto-tutorial information-security oscp oscp-journey oscp-tools oscp5 penetration penetration-test penetration-testing pentesting refresher security security-tools security-vulnerability
4729
clong / DetectionLab
Automate the creation of a lab environment complete with security tooling and logging best practices
ansible detection detectionlab dfir dfir-automation information-security lab-environment osquery packer powershell sysmon terraform vagrant vagrantfile
Language:HTML 4511
securityonion
Security-Onion-Solutions / securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
case-management cyber-security endpoint-security information-security intrusion-detection-system monitoring network-security security security-tools threat-hunting
Language:Shell 2876
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2085
lucasjacks0n / EggShell
iOS/macOS/Linux Remote Administration Tool
exploitation information-security ios jailbreak macos metasploit meterpreter pentest-scripts pentest-tool remote-admin-tool reverse-shell
Language:Objective-C 1614
tokyoneon / Chimera
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
bypass-antivirus antivirus-evasion antivirus attack offensive-security kali-scripts kali-script kali-linux kali information-security reverse-shell payload payloads penetration-testing payload-generator shell shell-scripts amsi
Language:PowerShell 1314
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
hacktoberfest hardening information-security security security-automation security-compliance security-hardening security-tools shell systemd ubuntu ubuntu-server
Language:Shell 1310
Cyber-Guy1 / API-SecurityEmpire
API Security Project aims to present unique attack & defense methods in API Security field
cybersecurity penetration-testing apisecurity information-security bugbounty api bug-bounty infosec cybersec tips bugbountytips
1287
CIRCL / AIL-framework
AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
ail-framework information-leak information-security analysis data-mining security security-incidents leak privacy
Language:Python 1278
jonluca / Anubis
Subdomain enumeration and information gathering tool
anubis subdomain kali network network-security information-security information-gathering anubis-db subdomains dnsdumpster netcraft hackertarget
Language:Python 1155
my-infosec-awesome
pe3zx / my-infosec-awesome
My curated list of awesome links, resources and tools on infosec related topics
awesome awesome-list information-security list
1026
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1019
ansjdnakjdnajkd / iOS
Most usable tools for iOS penetration testing
apple cheatsheet frida ghidra information-security information-security-research infosec ios jailbreak keychain macos objection objective-c pentest research security security-tools slides swift tools
955
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 855
palantir / osquery-configuration
A repository for using osquery for incident detection and response
osquery incident-response detection information-security octo-correct-managed
805
APKHunt
Cyber-Buddy / APKHunt
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
android-security information-security infosec owasp penetration-testing pentest pentesting pentesting-tools sast secure-coding security-tools static-analysis static-analyzer code-review masvs mobile-sec-android mstg owasp-mobile-top security apkhunt
Language:Go 693
SSTImap
vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools python rce ssti
Language:Python 659
p1r06u3 / opencanary_web
The web management platform of honeypot
honeypot opencanary information-security hacker
Language:Python 656
Lookyloo / lookyloo
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
capture dfir information-security lookyloo privacy scraping web-security
Language:Python 655
repoog / GitPrey
Searching sensitive files and contents in GitHub associated to company name or other key words
github hacking-tool information-security
Language:Python 600
msuiche / OPCDE
OPCDE Cybersecurity Conference Materials
cybersecurity incident-response vulnerability information-security
Language:C++ 592
counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
incident-response incident incident-management infosec information-security cybersecurity
Language:Makefile 576
MahdiMashrur / Awesome-Application-Security-Checklist
Checklist of the most important security countermeasures when designing, creating, testing your web/mobile application
api awesome awesome-list checklist information-security mobile-application security security-checklist web-application
575
Funkmyster / awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
cloud-security aws security information-security waf dlp logging cloud elasticsearch awesome awesome-list aws-security data-loss-prevention security-standards nist google-cloud-security hacktoberfest hacktoberfest2023 oracle-cloud-security hacktoberfestcebu
562
wongzeon / ICP-Checker
ICP备案查询，可查询企业或域名的ICP备案信息，自动完成滑动验证，保存结果到Excel表格，适用于新版的工信部备案管理系统网站，告别频繁拖动验证，以及某站*工具要开通VIP才可查看备案信息的坑
beian icp information-gathering information-security osint-tool python python3 spider
Language:Python 511
ail-project / ail-framework
AIL framework - Analysis Information Leak framework
ail-framework information-extraction information-security data-mining leak
Language:Python 501
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
ansible systemd auditd ubuntu centos hardening security security-hardening vagrant openscap information-security security-tools security-compliance debian almalinux hacktoberfest amazon-linux
Language:Jinja 499
Jieyab89 / OSINT-Cheat-sheet
OSINT cheat sheet, list OSINT tools, dataset, article, book and OSINT tips
cheatsheet hacking information-gathering information-security osint reconnaissance socmint
440
vlsergey / infosec
Учебное пособие по защите информации кафедры радиотехники и систем управления МФТИ
book cryptography information-security mactex mipt security tex tutorial
Language:TeX 435
gh0x0st / Buffer_Overflow
Don't let buffer overflows overflow your mind
brainpan brainpan-vm buffer-overflow cyber-security hacking information-security offensive-security oscp oscp-guide oscp-journey oscp-prep penetration-testing
Language:Python 426
obfus.h
DosX-dev / obfus.h
Macro-header for compile-time C obfuscation (tcc, win x86/x64)
c confuse easy-to-use information-security macro native obfuscation obfuscator protection tcc tiny windows antidebug compile-time tinycc msvc obfuscate low-level ctf
Language:C 425
virajkulkarni14 / WebDeveloperSecurityChecklist
A checklist of important security issues you should consider when creating a web application.
checklist information-security web-development
410

information-security

smicallef / spiderfoot

We5ter / Scanners-Box

rmusser01 / Infosec_Reference

MISP / MISP

OlivierLaflamme / Cheatsheet-God

clong / DetectionLab

Security-Onion-Solutions / securityonion

ComplianceAsCode / content

lucasjacks0n / EggShell

tokyoneon / Chimera

konstruktoid / hardening

Cyber-Guy1 / API-SecurityEmpire

CIRCL / AIL-framework

jonluca / Anubis

pe3zx / my-infosec-awesome

payloadbox / xxe-injection-payload-list

ansjdnakjdnajkd / iOS

mikeroyal / Open-Source-Security-Guide

palantir / osquery-configuration

Cyber-Buddy / APKHunt

vladko312 / SSTImap

p1r06u3 / opencanary_web

Lookyloo / lookyloo

repoog / GitPrey

msuiche / OPCDE

counteractive / incident-response-plan-template

MahdiMashrur / Awesome-Application-Security-Checklist

Funkmyster / awesome-cloud-security

wongzeon / ICP-Checker

ail-project / ail-framework

konstruktoid / ansible-role-hardening

Jieyab89 / OSINT-Cheat-sheet

vlsergey / infosec

gh0x0st / Buffer_Overflow

DosX-dev / obfus.h

virajkulkarni14 / WebDeveloperSecurityChecklist