security-auditing

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

reddacted lets you analyze & sanitize your online footprint using LLMs, PII detection & sentiment analysis to identify anything that might reveal personal info you may not want correlated with your anonymous profile

Windows command-line utility for bulk NTFS permission management, domain migrations, security auditing, and ACL backup and restore on large file servers.

Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)

Python CIS Benchmark auditor for Windows 10, Windows 11, and Windows Server, with security configuration checks and HTML/JSON compliance reports.

📊 Automate stock analysis from data collection to risk assessment and transaction reporting with this comprehensive workflow.

⚡ Multi-tenant Wi-Fi credential exfiltration simulation & defensive security auditing dashboard built with PHP and PowerShell.

TestCardX is a professional-grade credit card testing & validation framework for payment gateway integration, security auditing, and QA. Features Luhn-valid generation, multi-country BIN database, batch processing, parallel execution, and multiple export formats For authorized testing only.

A practical project to harden an Ubuntu server using security best practices.

WebSlamX is an automated, production-grade vulnerability assessment and infrastructure mapping framework engineered natively for Kali Linux environments. Built from scratch to address the limitations of standalone scanners, it links multiple state-of-the-art security utilities into a single, cohesive, multi-stage pipeline.

Network and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides and professional reporting.

High-assurance Compliance-as-Code framework, mapped to the Portuguese National Cybersecurity Reference Framework (QNRCS/CNCS) and EU NIS2 Directive. Includes the automated remediation engine.

Open-source Python CLI tool for benchmarking email server resilience, inbox rate-limiting, and spam filter behavior (SpamAssassin, Rspamd) under high-volume load. Automates concurrent subscription flows with multi-threading and SOCKS5/Tor proxy support for QA engineers, sysadmins, and authorized security auditing.

Autonomous Multi-Agent AI Cybersecurity & Security Auditing Framework for Linux & WSL

🖼️ Generate and edit images using text with the Opencode Antigravity Image plugin, supporting multiple variations and consistent character rendering.

Architectural analysis and threat modeling of bag distribution mechanisms at Apple.

Enhance AI coding agents with structured workflows and best practices for building reliable web applications through production-grade engineering skills.

🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

Reglet is a security-first compliance and infrastructure validation platform built on WebAssembly (Wasm). It enables engineering teams to define policy-as-code, execute validation checks in isolated sandboxed environments, and generate standardized audit artifacts (OSCAL/SARIF).