rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
rawfilejson / awesome-osint-arsenal
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
community-scripts / ProxmoxVE
Proxmox VE Helper-Scripts (Community Edition)
hwdsl2 / setup-ipsec-vpn
Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.
drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
telekom-security / tpotce
π― T-Pot - The All In One Multi Honeypot Platform π
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
hwdsl2 / docker-ipsec-vpn-server
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
Security-Onion-Solutions / securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
mitchellkrogza / nginx-ultimate-bad-bot-blocker
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
Astrosp / Awesome-OSINT-List
π‘ Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
sobolevn / git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
BrowserBox / BrowserBox
ππΊπΈπ½Secure remote browsing anywhere, any way you like it.
nestybox / sysbox
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
e-m-b-a / emba
EMBA - The firmware security analyzer
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
hwdsl2 / wireguard-install
WireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS. Includes interactive setup and client management.
jqssun / android-titanium-browser
Secure open-source Android browser with support for extensions
plenaryapp / awesome-rss-feeds
Awesome RSS feeds - A curated list of RSS feeds (and OPML files) used in Recommended Feeds and local news sections of Plenary - an RSS reader, article downloader and a podcast player app for android
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
eugene1g / agent-safehouse
Sandbox your local AI agents so they can read/write only what they need
jkroepke / helm-secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
dreamfactorysoftware / dreamfactory
DreamFactory is a secure, self-hosted enterprise data access platform that provides governed API access to any data source, connecting enterprise applications and on-prem LLMs with role-based access and identity passthrough.
ashishb / osx-and-ios-security-awesome
OSX and iOS related security tools
hwdsl2 / openvpn-install
OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. Includes interactive setup and client management.
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
wireghoul / graudit
grep rough audit - source code auditing tool
drduh / pwd.sh
Manage secrets with Bash and GnuPG symmetric encryption
tclahr / uac
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
ViRb3 / magisk-frida
π Run frida-server on boot with Magisk, always up-to-date
aws / eks-distro
Amazon EKS Distro (EKS-D) is a Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters.
aquasecurity / trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
bivlked / amneziawg-installer
Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.
voyagermesh / voyager
π Secure L7/L4 (HAProxy) Ingress Controller for Kubernetes
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
wazuh / wazuh-docker
Wazuh - Docker containers
lord-alfred / ipranges
π¨ List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
burghardt / easy-wg-quick
Creates Wireguard configuration for hub and peers with ease
ovh / debian-cis
PCI-DSS compliant Debian 12/13 hardening
ironfox-oss / IronFox
Private, secure, user first web browser for Android. This is a read-only mirror of https://gitlab.com/ironfox-oss/IronFox.
DNSCrypt / dnscrypt-server-docker
A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver
Chocolate4U / Iran-v2ray-rules
Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking.
GitHubSecurityLab / gh-secure
A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.
systemd / particleos
βΈ An image-based, secure OS, built on top of various Linux distributions
drduh / Purse
Manage secrets with Bash and GnuPG asymmetric encryption (YubiKey)
raphabot / awesome-cybersecurity-agentic-ai
β
lyz-code / best-of-digital-gardens
Ranked list of awesome digital gardens / second brains
Kicksecure / security-misc
Miscellaneous Linux security hardening settings for Kicksecure and derivatives
linagora / linshare
LinShare - Secure File Sharing
DouglasFreshHabian / AndroidForensics
Automated Android forensic toolkit: extract device info, apps, contacts, call logs, SMS, system logs, and more via ADB for security audits and investigations.
WMAL / kodachios
Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.
kyverno / policies
Kyverno policies for security and best practices
0x10debug / vps-security-enhancement-scripts
VPS Handbook β The Bedside Book for VPS & Cloud Ops (Script + 8-Chapter Handbook + Cheatsheets)