Stars
An automated auditing software for NIST SP-171 covering the protection of controlled, unclassified information in non-federal systems and organizations.
Modern Python library for HTTP security headers (CSP, HSTS, etc.) with secure defaults and presets for Shiny, FastAPI, Django, Flask, and other ASGI/WSGI apps.
A talking LLM that runs on your own computer without needing the internet.
21 Lessons, Get Started Building with Generative AI
Python training for business analysts and traders
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
BertViz: Visualize Attention in Transformer Models
OWASP Foundation Web Respository
Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
The recursive internet scanner for hackers. 🧡
Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
Free hands-on digital forensics labs for students and faculty
A repository of breaches of AWS customers
A small tool to help developers understand a huge set of security requirements from appsec teams
Segment's Threat Modeling training for our engineers
A list of public penetration test reports published by several consulting firms and academic security groups.
Open Security Controls Assessment Language (OSCAL)
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
🎨 ML Visuals contains figures and templates which you can reuse and customize to improve your scientific writing.
cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
Bringing Old Photo Back to Life (CVPR 2020 oral)
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
Kubernetes community content
Various scripts for using the ft232h for hardware hacking