Cybersecurity
Showing 36 of 355 projects
A post-exploitation framework with PowerShell and Python agents for security testing and red team operations.
A curated collection of interesting, funny, and concerning search queries for Shodan.io to find exposed devices and services.
An open-source, large-scale network packet capture, indexing, and analysis system with a web interface.
An automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.
An open-source adversary emulation platform that simulates malware attacks to test and improve network security defenses.
A customizable, easy-to-use Capture The Flag framework for running cybersecurity competitions.
An open-source platform for hosting Jeopardy and King of the Hill style Capture the Flag competitions.
A curated collection of security hardening guides, best practices, checklists, benchmarks, and tools for various systems and services.
An open-source platform for collecting, storing, sharing, and acting upon cybersecurity threat intelligence and indicators.
An easy-to-use, powerful, and reliable system to process and distribute data across cybersecurity, observability, and AI pipelines.
A Python-based hacking tool for remotely exploiting Android devices via ADB and Metasploit to gain Meterpreter sessions.
A comprehensive, free information security reference covering techniques, tools, tactics, and resources for learning and professional development.
A curated list of bug bounty programs, write-ups, and resources for security researchers and ethical hackers.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation.
A curated list of awesome information security courses, training resources, and hands-on labs for cybersecurity professionals and students.
A Python framework to automate the installation and updating of penetration testing tools on Debian/Ubuntu/ArchLinux systems.
An extensible Python framework for network forensic analysis through plugin-based dissection of packet captures.
A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
A curated list of awesome free (mostly open source) forensic analysis tools and resources for digital investigations.
A curated list of awesome free forensic analysis tools, resources, and learning materials for digital investigators.
A community-driven open-source project that structures threat hunting workflows using MITRE ATT&CK, Jupyter notebooks, and AI-augmented planning.
A memory forensics framework for extracting digital artifacts from volatile memory (RAM) samples across Windows, Linux, and macOS.
A curated list of awesome YARA rules, tools, and resources for malware researchers and security professionals.
A browsable archive of decrypted NSA exploit tools and implants leaked by the Shadow Brokers in 2017.
A static analysis tool that automatically extracts and deobfuscates strings from malware binaries.
A self-hosted network reconnaissance framework for building alternatives to Shodan, ZoomEye, Censys, and GreyNoise.
A testing tool that detects virtual machines and malware analysis environments using techniques observed in real malware.
An open-source threat hunting platform with advanced analytics capabilities built on ELK stack, Apache Spark, and Jupyter notebooks.
A commercial remote browser isolation (RBI) platform that streams a full modern browser to any client with low latency and 60 FPS.
A 'Vulnerable by Design' cloud deployment tool for creating and completing capture-the-flag style security scenarios on AWS and Azure.
A curated collection of proof-of-concept exploits for Common Vulnerabilities and Exposures (CVEs).
A comprehensive guide with diagrams and best practices for implementing corporate network segmentation across four security maturity levels.
An advanced malware sandbox for automated configuration and payload extraction with dynamic unpacking and anti-evasion capabilities.
A security tool that visualizes and analyzes Windows Active Directory event logs to investigate malicious logon activity.
A curated list of free, hands-on educational resources for learning cybersecurity through practical exercises and CTF challenges.
A fast, multi-protocol credential brute-forcer that parses Nmap, Nessus, and Nexpose output to test credentials across 30+ services.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.