Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

Fast and powerful SSL/TLS scanning library.

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

iOS & OSX Bluetooth library for RxSwift

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Simple and extensible plugin to track task times in your Gradle Project.

Show uncommitted, untracked and unpushed changes for multiple Git repos

Another web vulnerabilities scanner, this extension works on Chrome and Opera

Scans your AWS cloud resources and generates reports. Check out free hosted version:

A PHP version scanner for reporting possible vulnerabilities

Automatic Service Enumeration Script

Sqreen's Application Security Management for the Go language

Deploy custom push protections and policies on top of Git

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

Automate the scanning and enumeration of machines externally while maintaining complete control over scans shot to the target. Comfortable GUI-ish platform. Great for OSCP/HTB type Machines as well as penetration testing.

R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.

A minimalistic ARP scan tool written in Rust for fast local network scans