flightsim

Network Flight Simulator flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

akto

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

TTPForge

TTPForge TTPForge is a cyber attack simulation platform designed and built by Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng, and Geoff Pamerleau @Sy14r, and including subsequent contributions from many good folks in Meta’s Red, Blue, and Purple security teams. Jayson Grace @l50 migrated the...

CVE-2025-55182-research

🚀 CVE-2025-55182-research - Simple Steps to Secure Your System 📥 Download Now Download CVE-2025-55182-research 📘 Description CVE-2025-55182-research helps you understand and mitigate the vulnerabilities associated with CVE-2025-55182. This tool provides a proof of concept POC that shows how to...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

JoySafety

JoySafety — Large Model Security Framework 📋 Table of Contents Project Introduction ✨ Features 🚀 Quick Start 📖 User Guide 🏆 Best Practices 🏗️ Architecture Design 🛠️ Development 📄 License 📅 Roadmap Star History new release ✅ Prompt injection detection model fully upgraded : Training system...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

Sealighter

Sealighter - Easy ETW Tracing for Security Research I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without...

WebHackersWeapons

A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Tools Bookmarklets Browser Addons Burpsuite, Caido and ZAP Addons Contribute Thanks to contributor Weapons Attributes | Attributes ---|--- Types| Army-Knife Proxy Recon...

mimosa

Mimosa Description Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten. This is an opensource core; it excludes administrative controls. Features Lots of challenges References to modern pop culture Getting Started Method 1:Ja...

cloud-sniper

Cloud Sniper has a new home!! Click here to visit!! Cloud Security Operations What is Cloud Sniper? Cloud Sniper is a platform designed to manage Security Operations in cloud environments. It is an open platform which allows responding to security incidents by accurately analyzing and correlating...

cloudprober

cloudprober.org | Start Monitoring Now Cloudprober: Reliable System Monitoring, Simplified! Cloudprober supercharges your monitoring with active probes a.k.a. synthetic monitoring to ensure your systems—homelabs, microservices, APIs, websites, or cloud-to-on-prem connections—run smoothly. See thi...

Recon-Scan

Recon-Scan ReconScan is a open-source passive recon scanner with a FastAPI backend, async worker pipeline, and a single-page frontend. You can check the deployed site at https://recon-scan.vercel.app/ The point is fast signal: run a scan, get module-by-module findings, and get an AI summary that...

SecureAI-Scan

SecureAI-Scan Offline CLI that scans TypeScript, JavaScript, and Python for LLM, MCP, Agent Skill, and RAG risks — import-resolved dataflow evidence, zero default false positives, mapped to OWASP LLM/ASI/MCP Top 10. Most scanners in this space pattern-match a keyword and call it a finding...

BurpAPISecuritySuite

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite Professional-grade Burp Suite extension for comprehensive API...

pacu

Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

laf

LoRaWAN Auditing Framework - ALPHA VERSION IoT deployments just keep growing and one part of that significant grow is composed of millions of LPWAN low-power wide-area network sensors deployed at hundreds of cities Smart Cities around the world, also at industries and homes. One of the most used...