A Onion websites searcher

Open source templates you can use to bootstrap your security programs

Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )

AWS honey token manager

eBPF-based Security Observability and Runtime Enforcement

Automatically assess and score software repositories for supply chain risk.

Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.

The #1 open-source voice interface for desktop, mobile, and ESP32 chips.

Terminal UI to list, browse and run APIs defined with openapi spec.

Interactive JSON filter using jq

A compilation of resources in the software supply chain security domain, with emphasis on open source

This is a companion to the Security Engineer Questions

A cross-platform, customizable science fiction terminal emulator with advanced monitoring & touchscreen support.

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

This is a step-by-step guide to implementing a DevSecOps program for any size organization

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Community curated list of templates for the nuclei engine to find security vulnerabilities.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

Fast web fuzzer written in Go

Open source vulnerability DB and triage service.

Cobalt Strike Shellcode Generator

Phishing Template Generation Made Easy

Log converter from CS log to Ghostwriter CSV

Open EDR public repository

Aggressor scripts for use with Cobalt Strike 3.0+

OSINT Project. Collect information from a mail. Gather. Profile. Timeline.