Security Tools
Showing 36 of 387 projects
A curated list of tools, add-ons, articles, and exploits built with the Scapy packet manipulation library.
A curated list of tools, add-ons, articles, and exploits that use the Scapy packet manipulation library.
A packer for Windows x86 executable files that transforms and encrypts PE files to obstruct reverse engineering.
A binary diffing and patch analysis tool for reverse engineering and vulnerability research.
A GitHub scanning tool that identifies hardcoded credentials and filters false positives using machine learning models.
Visualizes network topologies and communication flows from pcap files across device, IP, and TCP/UDP layers.
A high-performance passive DNS monitoring framework that captures, indexes, and analyzes DNS traffic for security and network insights.
Automatically sync OpenPGP public keys across an organization to simplify GPG key management.
Idiomatic Rust bindings for the IDA SDK, enabling development of standalone binary analysis tools.
A multi-platform distributed brute-force password cracking system for parallelizing dictionary and word generator attacks.
A web interface for Hashcat that enables distributed password cracking sessions across multiple servers with real-time results.
A curated list of tools and resources for understanding, detecting, and removing malware persistence techniques across operating systems.
A curated collection of CVEs, research, tools, and resources for WebSocket security testing and vulnerability research.
A PowerShell module for live incident response that enumerates Windows autorun artifacts to detect persistence mechanisms used by malware and legitimate programs.
A customizable single-binary agent for collecting forensic artifacts from Windows, macOS, and Linux systems.
Visualizes AWS IAM and Organizations as a graph using Neo4j to identify security anomalies and privilege escalation paths.
A modular, recursive file scanning framework that extends Yara signatures to extract and analyze file objects for malware analysis and intelligence.
A C++ Windows malware analysis tool that uses memory and code hooks to detect and extract hidden code from packers.
A Python tool for offline detection of Windows persistence mechanisms in forensic collections like KAPE dumps or mounted disk images.
A pub-sub broker for threat intelligence data that connects open-source security tools like OpenCTI, MISP, Zeek, and VAST.
A curated list of resources, tools, and guidelines for understanding and implementing the General Data Protection Regulation (GDPR).
A Ruby script that fingerprints remote applications and third-party scripts to identify their versions for security assessment.
A curated list of awesome tools, libraries, dashboards, and resources for the Suricata intrusion detection/prevention system.
A Windows malware unpacker using Intel PIN for dynamic binary instrumentation and Scylla for import reconstruction.
Collecting & Hunting for IOCs with gusto and style
A static and symbolic analysis tool for finding memory safety bugs in browser code and other software.
A Rust CLI tool that finds and clears sensitive data from shell history to enhance command-line security.
An open-source SIEM system built with Python Django for log management, risk assessment, and asset tracking.
A Rust library for multi-protocol passive network fingerprinting, combining p0f-style TCP/HTTP analysis with JA4-style TLS client analysis.
A research project providing tools and detection rules for analyzing and simulating Quantum Insert network attacks.
An open-source memory forensics tool built on Volatility for differential analysis and data reduction in malware investigations.
A peer-to-peer SIP honeypot and fraud detection tool that collects and shares malicious IP addresses and phone numbers.
A community-driven web and service fingerprint identification tool written in Rust, supporting version detection and vulnerability validation.
Roslyn analyzers for detecting security vulnerabilities in .NET applications during development.
A word generator using per-position Markov chains for password cracking and dictionary generation.
A Go library for parsing and manipulating Snort and Suricata IDS/IPS rules with Suricata compatibility focus.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.