S

security

https://gitlab.com/gitlab-org/security-products/gemnasium-db The GitLab Advisory Database, used in GitLab Ultimate Dependency Scanning and Container Scanning. Contributions welcome! Search the database at https://advisories.gitlab.com.

⚙️🔗https://github.com/smallstep/certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

⚙️🔗https://github.com/smallstep/cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

https://github.com/cilium/cilium eBPF-based Networking, Security, and Observability

🕸️🔗

🔧🕸️🔗

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

🔧🔗https://github.com/danielmiessler/SecLists SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List type

🔧🔗https://github.com/google/testrun

A tool to automate verification of network-based device behavior

🔧🔗https://github.com/google/scaaml

SCAAML: Side Channel Attacks Assisted with Machine Learning

🔧🔗https://github.com/google/osv.dev Open source vulnerability DB and triage service.

🔧🔗https://github.com/kanidm/kanidm

Kanidm: A simple, secure, and fast identity management platform

trufflehog

https://github.com/trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

🔧🔗https://github.com/caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

🕸️🔗caddyserver.com

🔧🔗https://github.com/bytedance/vArmor vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.

Trident

🔧🔗https://github.com/tbckr/trident

Trident is an OSINT and Threat Intel CLI tool

🔧🔗https://github.com/google/grr GRR Rapid Response: remote live forensics for incident response

YubiKey Guide

https://github.com/drduh/YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

🔧🔗https://github.com/harishsg993010/damn-vulnerable-MCP-server

Damn Vulnerable MCP Server

config

https://github.com/drduh/config Configuration files and scripts used in guides and for system setup.

🔧🔗https://github.com/raspberrypi/rpi-sb-provisioner

A minimal-input automatic secure boot provisioning system for Raspberry Pi devices.

https://github.com/aquasecurity/traceeshark Deep Linux runtime visibility meets Wireshark