Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Attack Surface Management Platform

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Linux privilege escalation auditing tool

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

My simple Swiss Army knife for http/https troubleshooting and profiling.

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

EMBA - The firmware security analyzer

Security automation content in SCAP, Bash, Ansible, and other formats

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

grep rough audit - source code auditing tool

Hardening Ubuntu. Systemd edition.

Asset inventory of over 800 public bug bounty programs.

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

🔒 Anti DDOS | Bash Script Project 🔒

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

一键提取安卓应用中可能存在的敏感信息。

基于ARL-V2.6.2修改后的版本