The Wayback Machine - https://web.archive.org/web/20220602062338/https://github.com/topics/security-audit
Skip to content
#

security-audit

Star

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Here are 643 public repositories matching this topic...

Language: All
Filter by language
All 643 Python 193 Shell 59 JavaScript 39 Go 27 PHP 23 Java 22 HTML 21 Ruby 20 TypeScript 19 PowerShell 18
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

CISOfy / lynis

Star 9.7k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
  • Updated May 18, 2022
  • Shell

future-architect / vuls

Star 9.3k

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner
  • Updated May 30, 2022
  • Go
prowler

prowler-cloud / prowler

Star 5.7k

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail hacktoberfest gdpr security-tools devsecops cis-benchmark aws-auditing well-architected
  • Updated Jun 1, 2022
  • Shell

ehids / ecapture

Star 3.2k
Open

RFE: trace TLS in container

16
vincentmli
vincentmli commented May 30, 2022

Hi,

for example I have a netshoot pod running in kubernetes, when I run curl

kubectl exec -it netshoot-hostnetwork  -- curl -k -v https://10.1.34.88/

I want to trace the TLS connection from the curl from the netshoot-hostnetwork pod, the curl in netshoot-hostnetwork pod has libssl below in the pod namespace

kubectl exec -it netshoot-hostnetwork  -- ldd /usr/bin/curl
	/l
Read more
good first issue

charles2gan / GDA-android-reversing-Tool

Star 2.7k

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

security-audit decompiler malware-analysis mobile-security vulnerability-scanners privacy-protection
  • Updated Mar 22, 2022
  • Java

codingo / Reconnoitre

Star 1.9k

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

security security-audit scanner snmp hacking range enumeration nmap penetration-testing scanning kali-linux offensive-security virtual-hosts hacking-tool security-scanner security-tools oscp service-enumeration services-discovered discover-services
  • Updated Jul 6, 2020
  • Python
find-sec-bugs

find-sec-bugs / find-sec-bugs

Star 1.9k
Open

Detect usage of Apache BeanUtils as dangerous

2
h3xstream
h3xstream commented Oct 5, 2020

Description

BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.

Code

import org.apache.commons.beanutils.BeanUtils;

public
Read more
hacktoberfest good first issue
Find more good first issues
Wikipedia
Wikipedia