Security Tools
Showing 36 of 387 projects
A static analysis tool that scans Go source code for security vulnerabilities by analyzing the AST and SSA representations.
GEF is a modern GDB enhancement providing advanced debugging features for exploit developers and reverse engineers on Linux.
Bandit is a tool designed to find common security issues in Python code.
An open-source, large-scale network packet capture, indexing, and analysis system with a web interface.
A curated list of resources for learning and practicing web application security, including tools, books, courses, and vulnerable labs.
A static analysis security vulnerability scanner for Ruby on Rails applications.
An open-source, Google Zanzibar-inspired database for storing and querying fine-grained authorization data at scale.
A curated list of books, articles, websites, and tools for learning application security across multiple programming languages.
A curated list of books, articles, websites, and tools for learning application security across multiple programming languages.
An open-source adversary emulation platform that simulates malware attacks to test and improve network security defenses.
A simple wrapper for GPG to encrypt secrets in version control systems like Git, Mercurial, and Subversion.
A static analysis tool that finds security vulnerabilities and misconfigurations in GitHub Actions workflows.
A curated collection of security hardening guides, best practices, checklists, benchmarks, and tools for various systems and services.
An unsupervised coverage-guided kernel fuzzer for finding bugs in operating system kernels like Linux, Windows, and BSD variants.
A Python extension for GDB that enhances exploit development with colorized displays, security checks, and specialized commands.
A comprehensive, free information security reference covering techniques, tools, tactics, and resources for learning and professional development.
A modular reconnaissance framework for conducting open source intelligence (OSINT) gathering from web-based sources.
A curated list of bug bounty programs, write-ups, and resources for security researchers and ethical hackers.
A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
A Python framework to automate the installation and updating of penetration testing tools on Debian/Ubuntu/ArchLinux systems.
A high-performance multiple regex matching library using hybrid automata for simultaneous pattern matching across data streams.
An extensible Python framework for network forensic analysis through plugin-based dissection of packet captures.
Open source CNAPP that hunts for threats in cloud native platforms, ranks them by risk, and visualizes attack paths.
A comprehensive cheat sheet and tool collection for mobile application penetration testing, mapped to OWASP Mobile Top 10 risks.
A penetration testing tool that discovers and accesses RTSP video surveillance cameras through network scanning and dictionary attacks.
A curated list of awesome free forensic analysis tools, resources, and learning materials for digital investigators.
A curated list of awesome free (mostly open source) forensic analysis tools and resources for digital investigations.
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
An incident response framework for remote live forensics with Python client-server architecture.
An open-source intelligence (OSINT) tool for crawling and analyzing websites on the dark web and beyond.
A curated list of awesome open-source tools, detection rules, datasets, and resources for threat detection and hunting.
A tool to search for ROP gadgets in binary files to facilitate Return-Oriented Programming exploitation.
A Python script that discovers endpoints and their parameters in JavaScript files for penetration testing and bug hunting.
A source code analyzer that identifies features and characteristics in software components using static analysis and a JSON rules engine.
A curated collection of cheat sheets and resources for penetration testing and security assessments.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.