Security-tool Libraries

79 Components & Libraries

Sortby

Security-tool Libraries

Daemon to ban hosts that cause multiple authentication errors

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/priva…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

A collection of security related Python and Bash shell scripts, mainly revolving around testing hosts for security vulnerabilities. For the shell scripts no fancy programming framework is required, a…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Simple script that checks a domain for email protections

A program that checks if a domain can be spoofed from. The program checks SPF and DMARC records for weak configurations that allow spoofing. Additionally it will alert if the domain has DMARC configu…

An application to assist in the organization and prioritization of software security activities.

Check out these talks which cover building your own AppSec pipeline: Build and start the container Create super-user The following command will retrieve the latest metrics from ThreadFix for connecte…

unix wildcard attacks

It goes something like this: Feel free to change them!

:closed_lock_with_key: Open Source Python Keylogger Collection

Please read these files first before starting: The usage of this keylogger project for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all appli…

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

Keeper Commander is a command-line and SDK interface to Keeper® Password Manager. Commander can be used to access and control your Keeper vault, perform administrative functions (such as end-user onb…

A collection of custom security tools for quick needs.

‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: Test CO…

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technic…

Python script to decode common encoded PowerShell scripts

Python script to decode common encoded PowerShell scripts. Hope you find it helpful! Even more hacked together by @JohnLaTwC, Nov 2016 v 0.6 With apologies to @Lee_Holmes for using Python instead of …

A collection of public offensive and defensive security related scripts for InfoSec students.

A collection of public offensive and defensive security related scripts for InfoSec students. Only run these in a controlled and authorized manner! Whenever available, original copyright notices are …

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Basic script to detect vulnerabilities into a PHP source code, it is using Regular Expression to find sinkholes. Currently detecting : if you want to export each vulnerabilities type into a folder us…

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Note: Salt Master and Minion versions should match. Salt-Scanner supports Salt v…

Python 3.5+ DNS asynchronous brute force utility

A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Alternately you can install the usual way: Get help: Run a brute force with some custom options: Run a brute force, su…

A REST API security testing framework.

If you like the project, you can buy me beers :)

Predict python's random module generated values.

To install randcrack, simply: This cracker works as the following way. It obtains first 624 32 bit numbers from the generator and obtains the most likely state of Mersenne Twister matrix, which is th…

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

A Burp Suite Automation Tool

Find web directories without bruteforce

If you have Pip installed on your system, you can use it to install the latest Dirhunt stable version: This software must not be used on third-party servers without permission. Dirhunt has been creat…

Automated Mass Exploiter

Receiving back connections on your local machine might not be the best idea from an OPSEC standpoint. Instead consider running this tool from a VPS that has all the dependencies required, available. …

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

It's an intelligent framework that detects security anomalies in all layer 7 assets and reports the same. As companies continue to expand their footprint on INTERNET via various acquisitions and geog…

Bandit is a tool designed to find common security issues in Python code.

A security linter from PyCQA Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins agains…

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

STIX-shifter is an open source python library allowing software to connect to products that house data repositories by using STIX Patterning, and return results as STIX Observations. This library tak…

Common password pattern generator using strings list

In this parameter we are going to select how the tool will work when shifting strings. You can choose one of three:

Performing security tests inside your CI

Developers can set up a new stage into their CI pipelines to check for vulnerabilities: If security issues are found in the code, the severity, the confidence, the file, the line, and many more usefu…

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

Takedown WiFi access points, devices in your network, servers, services, and Bluetooth devices with ease. Just enter the following line to install Raven-Storm on Linux.

Related tags