security-audit · GitHub Topics | GitHub 中文社区

lynis

@CISOfy

Lynis是基于UNIX的系统的安全审计，主要目标是测试安全防御并提供进一步系统强化的提示

shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix

Shell13.48 k

18 天前

ecapture

@gojue

ecapture 是一款无需安装CA证书，即可抓取HTTPS、TLS等明文数据包的工具。也可以捕捉bash的命令，适用于安全审计场景。包括mysqld的数据审计等。

golang ebpf tcpdump ssldump https tls security-audit network-capture android-https-capture ssl

C13.48 k

6 天前🇨🇳

prowler

@prowler-cloud

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. ...

翻译 - Prowler 是一种安全工具，用于执行 AWS 安全最佳实践评估、审计、事件响应、持续监控、强化和取证准备。它包含此处列出的所有 CIS 控件 https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf 以及 100 多项有助于满足 GDPR、HIPAA 和其他安全要求的额外检查。

security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics

Python10.87 k

1 天前

brakeman

Justin Collins@presidentbeef

A static analysis security vulnerability scanner for Ruby on Rails applications

翻译 - 用于Ruby on Rails应用程序的静态分析安全漏洞扫描程序

ruby rails security static-analysis vulnerabilities brakeman security-vulnerability security-tools security-audit

Ruby7.02 k

10 天前

DependencyCheck

@jeremylong

Dependency-Check是一个用于检测应用程序的依赖项（项目中引入的各种库、框架和软件包）中是否存在已知漏洞的工具。它可以用于各种编程语言和项目类型，包括Java、JavaScript、Python等

security-audit build-tool maven-plugin jenkins-plugin gradle-plugin vulnerability-detection security ant-task software-composition-analysis

Java6.46 k

12 小时前

osv-scanner

谷歌公司@google

一个漏洞扫描器。Go开发，使用数据来自 https://osv.dev/

scanner security-audit security-tools vulnerability-scanner

Go6.19 k

1 个月前

faraday

Faraday@infobyte

Open Source Vulnerability Management Platform

翻译 - 协同渗透测试和漏洞管理平台

devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management

Python5.05 k

1 天前

GDA-android-reversing-Tool

@charles2gan

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leakin...

翻译 - GDA是完全用c ++编写的新反编译器，因此它不依赖Java平台，该平台简洁，可移植且速度很快，并支持APK，DEX，ODEX，燕麦。

decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection

Java4.21 k

6 个月前

arachni

Arachni - Web Application Security Scanner Framework@Arachni

Web Application Security Scanner Framework

翻译 - Web应用程序安全扫描程序框架

arachni dom ruby audit detection security-audit analysis modular javascript scanners

Ruby3.79 k

1 年前

cloudsploit

Aqua Security@aquasecurity

Cloud Security Posture Management (CSPM)

翻译 - 云安全状态管理（CSPM）

aws security security-audit cloud azure cspm aqua gcp oci oracle

JavaScript3.36 k

7 天前

github-dorks

@techgaun

Find leaked secrets via github search

翻译 - 通过github搜索查找泄露的秘密

security-audit github-dork hacktoberfest dork dorker hacking

Python2.82 k

1 年前

bundler-audit

@rubysec

Patch-level verification for Bundler

翻译 - Bundler的补丁程序级别验证

bundler-audit ruby-advisory-db ruby dependency-checker patch-management security security-tools security-audit

Ruby2.69 k

2 个月前

pwndoc

@pwndoc

Pentest Report Generator

翻译 - Pentest报告生成器

pentest reporting pentesting-tool reporting-tool security security-tool collaboration audit security-audit penetration-testing

JavaScript2.3 k

1 个月前

DSInternals

Michael Grafnetter@MichaelGrafnetter

Directory Services Internals (DSInternals) PowerShell Module and Framework

翻译 - 目录服务内部（DSInternals）PowerShell模块和框架

security-audit penetration-testing active-directory nuget-packages ntds powershell dpapi sam lsa passwords

C#1.66 k

2 个月前

sysreptor

@Syslifters

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

penetration-testing pentest pentesting-tool reporting reporting-tool security-assessment security-audit infosectools offsec oscp

Python1.48 k

9 天前