detect-secrets helps teams detect and prevent credentials from entering source code using baselines, plugins, filters and Git hooks.
Read more
Category: Security
Fluxion – Wireless Security Auditing Tool
Fluxion is a terminal-based security auditing tool for evaluating WPA and WPA2 network exposure through controlled captive-portal testing.
Read more
Gitleaks – detect secrets in Git repositories and files
Gitleaks scans Git repositories, files and standard input for passwords, API keys, tokens and other hard-coded secrets in source code.
Read more
hcxtools – Analyze Wi-Fi Capture and Hash Files
hcxtools is a command-line suite for converting, filtering and analysing wireless captures and authentication hashes during authorised security assessments.
Read more
Keysign – OpenPGP key signing helper
Keysign is a GTK application that securely exchanges and signs OpenPGP keys over a local network or Bluetooth without relying on a keyserver.
Read more
y509 – analyse and validate X.509 certificate chains
y509 is a terminal interface for inspecting and validating X.509 certificate chains from files, stdin and live TLS or STARTTLS services.
Read more
11 Best Open Source Firewall Distributions
Security is paramount. Security involves defense in depth. Approaching security one step at a time, with consistency and rigour, you can mitigate threats.
Read more
9 Useful Free and Open Source Linux Reverse Vulnerability Analysis Tools
Vulnerability analysis is an essential activity for enterprise security. We recommend useful open source tools.
Read more
Jazzer – coverage-guided, in-process fuzzer for the Java Virtual Machine
Jazzer uses code coverage to steer generated inputs towards unexplored paths, crashes and vulnerabilities.
Read more
Ronin – Ruby toolkit for security research and development
Ronin is a Ruby toolkit for security research and development. It provides command-line tools and libraries
Read more
12 Best Free and Open Source Linux Terminal-Based Port Scanners
Linux has a good range of port scanners that help administrators identify and rectify weaknesses in a system.
Read more
syzkaller – unsupervised, coverage-guided kernel fuzzer
syzkaller is an unsupervised, coverage-guided kernel fuzzer.
Read more
XMap – fast network scanner
XMap is a fast network scanner for large-scale IPv4 and IPv6 research.
Read more
sx – command-line network scanner
sx is a command-line network scanner designed to follow the UNIX philosophy.
Read more
17 Best Free and Open Source Vulnerability Detection Tools
Vulnerability scanning is an essential activity for enterprise security. We recommend the best free and open source vulnerability detection tools.
Read more
OSV-Scanner – finds known vulnerabilities
OSV-Scanner finds known vulnerabilities affecting your project’s dependencies.
Read more
8 Best Free and Open Source Network Intrusion Detection Systems
An intrusion detection system is a device or software application that monitors a network or systems for malicious activity or policy violations.
Read more
Slips – intrusion detection and prevention system
Slips (Stratosphere Linux IPS) is an endpoint behavioural intrusion detection and prevention system.
Read more
testssl.sh – tests TLS/SSL ciphers, protocols and cryptographic flaws
testssl.sh is a command-line tool that checks a server’s service on any port for support of TLS/SSL ciphers and protocols as well as cryptographic flaws.
Read more
Vuls – agentless vulnerability scanner
Vuls is an agentless vulnerability scanner that identifies security vulnerabilities affecting Linux, FreeBSD, Windows, macOS
Read more