Security Tools
Showing 36 of 387 projects
A curated list of threat modeling resources including books, courses, videos, tools, tutorials, and examples for learning and practicing threat modeling.
A multi-platform client-server tool for distributing Hashcat password cracking tasks across multiple computers.
A Burp Suite extension for advanced GraphQL security testing, featuring vulnerability scanning, batch attacks, and schema analysis.
An open-source tool for PostgreSQL and MySQL database anonymization, synthetic data generation, and logical dumping.
A curated list of DevSecOps tools, resources, and training materials for integrating security into the development lifecycle.
A machine learning security engine that preemptively prevents web app and API threats using supervised and unsupervised models.
A grep-based source code auditing tool that finds potential security flaws using signature databases for multiple programming languages.
A Python tool for calculating RSA and RSA-CRT cryptographic parameters and generating OpenSSL-compatible keys.
A modern hash identification tool that names MD5, SHA256, and 300+ other hash types with popularity ratings and summaries.
Upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools, complementing the kernel's mandatory access control features.
An automated framework for monitoring and tampering with system API calls of native macOS, iOS, and Android apps using Frida.
A curated list of awesome resources, tools, and literature on executable packing, unpacking, and detection for malware analysis and cybersecurity.
A command-line tool that detects steganographically hidden data in PNG and BMP image files.
A collection of small, chainable command-line utilities for advanced password cracking operations.
The largest open-source database of regex patterns for detecting secrets, API keys, passwords, and tokens in code.
A web-based tool for deobfuscating and unpacking JavaScript code, supporting multiple obfuscation formats.
A curated list of open-source .NET deobfuscators and unpackers for reversing protected assemblies.
A portable, extensible incident response tool that automates forensic artifact collection across Unix-like systems.
A Python tool for analyzing and breaking multi-byte XOR ciphers by guessing key length and content.
A fully managed, cross-platform .NET library for capturing network packets from live devices and files.
A Python tool for analyzing PDF files to detect malicious content and perform security research.
A Qt and C++ GUI for the radare2 reverse engineering framework, designed to make binary analysis accessible.
A multiplatform open-source framework for binary analysis and reverse engineering, supporting x86 and ARM architectures.
A multithreaded PDF password cracking utility with structured search builders, checkpoint/resume, and optimized performance.
A portable Python script that automates malware analysis by collecting runtime indicators using Sysinternals Procmon.
A community-sourced, machine-readable knowledge base of digital forensic artifacts for use in forensic tools and investigations.
Automated deployment of red team infrastructure using Docker with a web interface for managing offensive security tools.
A curated collection of fascinating and bizarre Censys Search queries for discovering exposed devices and services.
A modular vulnerability scanner that checks website security and automatically generates easy-to-read reports for organizations.
A collection of practical security-focused guides and checklists for smart contract development.
A CLI tool that audits API specifications, validates OpenAPI compliance, and runs security tests to prevent undefined user behavior.
A Terraform module to configure AWS accounts with a secure baseline aligned to CIS AWS Foundations and AWS Foundational Security Best Practices.
A Go program that reverse engineers Docker images to reconstruct the original Dockerfile.
A tool to create multiple TOR instances with load-balancing for increased anonymity and distributed traffic.
A lightweight Certificate Transparency log monitor that alerts you when SSL/TLS certificates are issued for your domains.
A collection of tools and scripts for unpacking and analyzing protected Android applications, originally presented at Defcon 22.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.