S

security

🔧🔗https://github.com/meta-llama/PurpleLlama

Set of tools to assess and improve LLM security.

https://github.com/firefart/stunner.git Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

https://github.com/DataDog/stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

🔗 https://stratus-red-team.cloud/

🔧🔗https://github.com/google/grr GRR Rapid Response: remote live forensics for incident response

🔧🔗https://github.com/bytedance/Elkeid Elkeid is an open source solution that can meet the security requirements of various workloads

YubiKey Guide

https://github.com/drduh/YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

OsQuery Defense Kit

🔧🔗https://github.com/chainguard-dev/osquery-defense-kit

🔧🔗https://github.com/glauth/glauth A lightweight LDAP server for development, home use, or CI

https://github.com/cilium/cilium eBPF-based Networking, Security, and Observability

🕸️🔗

🔧🔗https://github.com/invariantlabs-ai/invariant

Guardrails for secure and robust agent development

MacOS Security and Privacy Guide

https://github.com/drduh/macOS-Security-and-Privacy-Guide Community guide to securing and improving privacy on macOS.

Trident

🔧🔗https://github.com/tbckr/trident

Trident is an OSINT and Threat Intel CLI tool

Chamber

🔧🔗https://github.com/cirruslabs/chamber Chamber is a tool for running coding agents like Claude inside Tart macOS virtual machines with the current directory mounted. It provides a lightweight isol

🔧🔗https://github.com/harishsg993010/damn-vulnerable-MCP-server

Damn Vulnerable MCP Server

https://github.com/aquasecurity/cloudsploit Cloud Security Posture Management (CSPM)

🔧🔗https://github.com/Infisical/infisical

♾️ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

config

https://github.com/drduh/config Configuration files and scripts used in guides and for system setup.

🔧🔗https://github.com/goauthentik/authentik The authentication glue you need.

https://github.com/aquasecurity/traceeshark Deep Linux runtime visibility meets Wireshark

pwd.sh

https://github.com/drduh/pwd.sh GnuPG symmetric secrets manager using Bash.