Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Repositories 7,213

x64dbg / x64dbg

33.9k

An open-source x64/x32 debugger for windows.

debugger windows x64 disassembler reverse-engineering security x86 x86-64

Good first issues

See all

Snowman writes its ini to current directory

easy bug

#2154 opened 23 days ago by adoxa

Implement 'live' views for comments/labels/bookmarks

easy feature

#2114 opened 4 months ago by mrexodia

[Feature request] Add shortcut for "copy line" action

easy enhancement

#2110 opened 4 months ago by bartlomiejduda

C++ Updated May 12, 2019

Hack-with-Github / Awesome-Hacking

29.5k

A collection of various awesome lists for hackers, pentesters and security researchers

hacking security bug-bounty awesome android fuzzing penetration-testing pentesting-windows reverse-engineering

Updated Apr 29, 2019

trimstray / the-book-of-secret-knowledge

20k

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

awesome awesome-list lists manuals resources howtos hacks search-engines one-liners cheatsheets guidelines sysops devops pentesters security-researchers linux bsd security hacking

Updated May 17, 2019

FallibleInc / security-guide-for-developers

18.1k

Security Guide for Developers (实用性开发人员安全须知)

security-checklist security-book security books api

Updated Dec 14, 2017

mitmproxy / mitmproxy

15k

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

python security man-in-the-middle tls ssl http http2 websocket proxy

Good first issues

See all

Recommend installation in a virtualenv

kind/docs os/linux

#3357 opened 7 months ago by cdunklau

Docs on ReadTheDocs outdated

kind/docs

#3285 opened 10 months ago by ulope

Documentation lacks basic usage examples

kind/docs

#3142 opened 12 months ago by stellarpower

Python Updated May 17, 2019

drduh / macOS-Security-and-Privacy-Guide

14.8k

Guide to securing and improving privacy on macOS

apple macos security privacy osx disk-encryption macos-setup macos-security macbook-security dnscrypt-proxy macbook-configuration

Python Updated May 14, 2019

facebook / osquery

14.2k

SQL powered operating system instrumentation, monitoring, and analytics.

security monitoring intrusion-detection sql

Good first issues

See all

new column 'epoch' in schema rpm_packages

good-first-issue Linux

#5202 opened 8 months ago by gramsimamsi

Create tests for the tables `gatekeeper`, `gatekeeper_approved_apps`

good-first-issue build

#5014 opened 9 months ago by akindyakov

Create tests for the table `chocolatey_packages`

good-first-issue Windows

#5037 opened 9 months ago by akindyakov

C++ Updated May 17, 2019

trailofbits / algo

13.2k

Set up a personal IPSEC VPN in the cloud

vpn-server strongswan ansible vpn ikev2 security encryption ipsec vpn-client ssh-tunnel wireguard

Good first issues

See all

WireGuard on iPhone does not transition between wifi and LTE

documentation 1.1

#1385 opened about 2 months ago by moshesiegel

Add docs that cover using Wireguard from ChromeOS

documentation

#1329 opened 3 months ago by dguido

Better Documentation For Other Cloud Providers

good first issue needs_triage

#682 opened over 1 year ago by RandomDSdevel

Python Updated May 18, 2019

Developer-Y / cs-video-courses

13.1k

List of Computer Science courses with video lectures.

computer-science algorithms systems databases machine-learning web-development security computer-architecture bioinformatics robotics embedded-systems database-systems programming-language computer-vision

Updated May 18, 2019

shieldfy / API-Security-Checklist

12.6k

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api security jwt oauth2

Updated Jan 19, 2019

Hacker0x01 / hacker101

10.5k

Hacker101

education hacking security hackerone hacker101 xss clickjacking csrf web-security session-fixation unchecked-redirects sql-injection

CSS Updated Apr 22, 2019

radare / radare2

10.3k

unix-like reverse engineering framework and commandline tools

radare2 c commandline unix reverse-engineering forensics analysis security

Good first issues

See all

Add libr/main/r2pipe.c

good first issue FEEDBACK WANTED

#14070 opened 4 days ago by radare

Rename CORELIB define to something like R2_...

good first issue refactor

#14058 opened 5 days ago by radare

AArch64 - `wa` write assembly instruction gives wrong results

good first issue RAsm-Assembler

#14052 opened 5 days ago by MatejKastak

C Updated May 18, 2019

hwdsl2 / setup-ipsec-vpn

9.7k

Scripts to build your own IPsec VPN server, with IPsec/L2TP and Cisco IPsec on Ubuntu, Debian and CentOS

vpn ipsec l2tp ikev2 security vpn-server network

Shell Updated May 10, 2019

imthenachoman / How-To-Secure-A-Linux-Server

9.1k

An evolving how-to guide for securing a Linux server.

linux hardening hardening-steps security security-hardening server linux-server cc-by-sa

Updated Apr 12, 2019

trimstray / nginx-admins-handbook

8.2k

These notes describes how to improve NGINX performance, security and other important things; @ssllabs A+ 100%, @mozilla…

nginx nginx-proxy nginx-configuration security performance http https ssllabs notes cheatsheet reference

Updated May 14, 2019

valentinxxx / nginxconfig.io

7.9k

⚙️ NGiИX config generator on steroids 💉

HTML Updated May 15, 2019

mailpile / Mailpile

7.8k

A free & open modern, fast email client with user-friendly encryption and privacy features

e-mail security pgp search-engine tags imap-client smtp-client

Good first issues

See all

Review where Mailpile creates temporary files

Low Hanging Fruit Back End

#2218 opened 14 days ago by BjarniRunar

Treat certain URLs as attachments in the UI

Low Hanging Fruit Back End

#2204 opened 4 months ago by BjarniRunar

Improve Mailpile's notifications and event log

Low Hanging Fruit Front End

#2168 opened 6 months ago by BjarniRunar

Python Updated Apr 21, 2019

trimstray / the-practical-linux-hardening-guide

7.7k

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

linux linux-hardening linux-security security hardening audit guide manual checklist cis pci-dss openscap redhat-enterprise-linux centos

Updated Apr 12, 2019

google / tink

7.7k

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy …

cryptography java cpp go objc crypto security javascript

Java Updated May 15, 2019

keeweb / keeweb

7.6k

Free cross-platform password manager compatible with KeePass

keeweb keepass security password-manager password electron javascript

JavaScript Updated May 5, 2019

wifiphisher / wifiphisher

7.4k

The Rogue Access Point Framework

wifiphisher wifi rogue access-point python security attack malware phishing redteaming

Python Updated Apr 24, 2019

docker / labs

7.4k

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

docker-tutorial lab swarm docker docker-compose swarm-mode orchestration windows dotnet java security containers

PHP Updated Apr 26, 2019

gravitational / teleport

7.2k

Privileged access management for elastic infrastructure.

ssh go bastion firewall security jumpserver

Good first issues

See all

Improve integration tests

good-starter-issue test problem

#2706 opened 10 days ago by russjones

fix confusing error around Enterprise-only features (`creating resources of type "saml" is not supported`)

good-starter-issue

#2641 opened about 1 month ago by aberoham

Add hints for error messages on `tctl`

good-starter-issue ux

#2594 opened 2 months ago by klizhentas

Go Updated May 17, 2019

OpenZeppelin / openzeppelin-solidity

7.1k

OpenZeppelin is a library for secure smart contract development

zeppelin ethereum solidity evm security

Good first issues

See all

Add ERC721 _safeMint and _safeTransferFrom

good first issue contracts

#1736 opened 14 days ago by frangio

Improve revert reason when assuming interface compliance

good first issue contracts

#1727 opened 24 days ago by nventuro

Replace chai.should with chai.expect.

good first issue tests

#1687 opened about 2 months ago by nventuro

JavaScript Updated May 18, 2019

threat9 / routersploit

Exploitation Framework for Embedded Devices

python security infosec router-exploitation-framework routersploit-framework exploits embedded router routersploit scanner creds dictionary-attack bruteforce

Python Updated May 12, 2019

future-architect / vuls

6.4k

Agent-less vulnerability scanner for Linux/FreeBSD/WordPress/Programming language libraries/Network devices

Go Updated May 16, 2019

ory / hydra

6.2k

OpenID Certified™ OpenID Connect & OAuth2 Server (OP, OpenID Provider) - cloud native, security-first, open source AP…

hydra oauth2 openid-connect docker server security authorization identity federation cloud cloud-native sso openid oauth openid-provider openid-connect-provider oauth2-server oauth2-provider

Go Updated May 18, 2019

helmetjs / helmet

Help secure Express apps with various HTTP headers

javascript middleware security http-headers

JavaScript Updated May 5, 2019

trimstray / test-your-sysadmin-skills

5.8k

A collection of *nix Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with the…

Updated Apr 12, 2019

zaproxy / zaproxy

5.6k

The OWASP ZAP core project

zap owasp-zap zap-development dast appsec zaproxy owasp security security-scanner

Good first issues

See all

Ability to replace non-ascii values with the Replacer tool

good first issue IdealFirstBug

#5328 opened 19 days ago by marky1124

Split fuzzdb

good first issue IdealFirstBug

#5294 opened about 2 months ago by kingthorin

OpenAPI Support fails when importing arrays with primitives as payload

good first issue IdealFirstBug

#5250 opened 2 months ago by markuskiss

Java Updated May 17, 2019

Security apps

GuardRails

GuardRails provides continuous security feedback for modern development teams

Renovate

Renovate Bot automates dependency updates. Flexible so you don't need to be

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

See more Security apps

Learn about security

Wikipedia: Wikipedia

Loading…