tools/security

Faster Nmap Scanning with Rust

Cipher/decipher text within a file

A Vault CLI

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

Tool to extract useful data from documents

Secure Boot key manager

Generate SBOMs for nix targets

Tools for maintaining UEFI signature databases

Schleuder is an encrypting mailing list manager with remailing-capabilities

Information gathering tool for DNS, ports and more

Security health metrics for Open Source

Encryption utility

IP lookups for open ports and vulnerabilities from internetdb.shodan.io

Zero-configuration elliptic curve cryptography utility

Optimized C library for EC operations on curve secp256k1

Tool to check packets for secrets

Tool to find secrets and passwords in container images and file systems

DTA sedutil Self encrypting drive software

Lightweight static analysis for many languages - cli

Lightweight static analysis for many languages - core binary

Sequoia's reimplementation of the GnuPG interface

An implementation of the Stateless OpenPGP Command Line Interface using Sequoia

A command-line OpenPGP signature verification tool

Library and command line tool to detect SHA-1 collision

Shell Script Compiler

The 'share-secrets-safely' CLI to interact with GPG/pass-like vaults

Secure shell history commands by finding sensitive data

A shellcode writing toolkit

Utility to manage your SSH, telnet, kubernetes, winrm, web or any custom shell

Hunt down social media accounts by username across social networks

Lightweight static analyzer for several programming languages

Sigma command line interface

OpenBSD signing tool

A collection of several projects relating to OpenPGP

Tool to enumerate an Active Directory Domain

Simple PKCS11 provider for TPM chips

Set of tools to audit SIP based VoIP systems

A Qt/C++ GUI front end to sshfs, ecryptfs-simple, cryfs, gocryptfs, securefs, fscrypt and encfs

Application Layer DoS attack simulator

Verify provenance from SLSA compliant builders

SMB enumeration tool

Tool to enumerate file shares

Tool to scan for secret files on HTTP servers

Conceal messages in ASCII text by appending whitespace to the end of lines

A tool to audit the istio service mesh

Polyglot payload generator

Open-source penetration testing framework designed for social engineering

Cryptographic store accessible through a PKCS #11 interface

A CLI tool for managing SoloKeys' Solo2 USB security keys

SonarQube Scanner used to start code analysis

Simple and flexible tool for managing secrets

A stateless cryptographic identity algorithm

Spectre & Meltdown vulnerability/mitigation checker for Linux

The SPIFFE Runtime Environment

The SPIFFE Runtime Environment

The SPIFFE Runtime Environment

YARA-based IOC scanner

Delete files securely

A program for calculating fuzzy hashes

Tool for ssh server auditing

Tool for SSH security audits

Convert ssh private keys in ed25519 format to age keys

Convert ssh private keys to PGP

Dedicated SSH brute-forcing tool

Protects hosts from brute-force attacks

Tool for SSH, reverse sshfs and port forwarder

Transparent proxy server that works as a poor man's VPN

Tests SSL/TLS services and discover supported cipher suites

Command line program for secret-sharing strings

Shamir Secret Sharing Scheme

Static token and credential scanner

Tool to crack steganography

A private certificate authority (X.509 & SSH) & ACME server for secure automated certifica…

A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc

Step plugin to manage keys and certificates on cloud KMSs and HSMs

Software Token for Linux/UNIX

Multi-use cryptographic tool based on the STRIBOB algorithm

Switch user and group id and exec

Fetcher for Javascript files

A command to run commands as root

A memory safe implementation of sudo and su

Tool to searching for secret on swaggerhub

Libtpms-based TPM emulator

Libtpms-based TPM emulator

Command-line network scanner

A pre-kernel/VMM module that uses Intel(R) TXT to perform a measured and verified launch of an OS …

Alternative password shadowing scheme

Fast TCP encryption

Real-time HTTP Intrusion Detection

Tools to find secrets from various signatures

Detect compliance and security violations across Infrastructure

An interactive menu to autotype and copy Pass and GoPass data

A very fast network logon cracker which support many different services

IPv6 attack toolkit

Gather E-mails, subdomains and names from different public sources

Framework for end-to-end testing threat detection rules

TLS grabber focused on TLS based data collection

Anonymizing overlay network

Wrapper to safely torify applications

LUKS key storage in TPM NVRAM