Notation is a command-line tool for signing and verifying container images and other artifacts stored in OCI registries.
Read more
Category: Security
Syd – configurable application sandbox for Linux
Syd is a Linux application sandbox using seccomp, Landlock and namespaces to control filesystem, network and process behaviour.
Read more
in-toto – framework for software supply chain integrity
in-toto protects software supply chains by recording signed metadata for each step and checking the result against a defined layout.
Read more
cosign – sign and verify software artifacts with Sigstore
cosign signs and verifies containers, binaries and other software artifacts using Sigstore, keys, identities and transparency logs.
Read more
NsJail – process isolation and sandboxing utility
NsJail is a process isolation tool designed to run applications inside tightly controlled environments.
Read more
bubblewrap – low-level unprivileged sandboxing tool
bubblewrap is a low-level Linux sandboxing tool for constructing restricted process environments with namespaces, bind mounts and seccomp.
Read more
22 Best Free and Open Source CLI Data Hashing Tools
Hashing is the process of passing data through a formula that produces a condensed fixed-value representation, called a hash value.
Read more
10 Best Free and Open Source Graphical Data Hashing Tools
Hashing is the process of passing data through a formula to produce a condensed fixed-value representation, called a hash value.
Read more
knife – reverse engineering toolkit for binary analysis
knife is a reverse engineering toolkit for static analysis of PE, ELF and Mach-O binaries, with disassembly, triage and auditing.
Read more
sbomnix – generate Software Bills of Materials for Nix
sbomnix generates CycloneDX and SPDX Software Bills of Materials for Nix flakes and store paths, with dependency and metadata analysis.
Read more
CycloneDX CLI – command-line toolkit for BOM documents
CycloneDX CLI analyzes, converts, merges, signs, verifies and validates BOM documents, with support for CycloneDX and SPDX formats.
Read more
4 Best Free and Open Source Malware Sandboxes
Discover free and open source malware sandboxes for static and dynamic analysis of suspicious software.
Read more
Capstone – multi-architecture disassembly framework
Capstone is a lightweight multi-architecture disassembly framework with detailed instruction metadata, and numerous bindings.
Read more
bom – create, view and transform Software Bills of Materials
bom is a command-line SBOM multitool for creating, viewing and transforming SPDX documents from files, directories and container images.
Read more
Pharos – static binary analysis framework
Pharos is a static binary analysis framework with tools for API analysis, C++ object recovery, function hashing and YARA signature generation.
Read more
disk-encryption-tool – encrypt existing Linux storage with LUKS
disk-encryption-tool converts existing Linux storage to LUKS encryption, with Btrfs and swap handling, initrd integration and key management.
Read more
Miasm – reverse engineering framework for binary analysis
Miasm is a reverse engineering framework offering binary parsing, assembly, disassembly, emulation, symbolic execution and code analysis.
Read more
OSS Review Toolkit – automate open source compliance
ORT automates dependency analysis, license compliance, vulnerability checks, policy evaluation and Software Bill of Materials generation.
Read more
Best Free and Open Source Alternatives to Google Authenticator
Discover the best free and open source alternatives to Google Authenticator for secure two-factor authentication and OTP codes.
Read more
FreeOTP+ – feature-rich two-factor authenticator for Android
FreeOTP+ is an Android authenticator supporting HOTP/TOTP, QR scanning, backups, biometrics, search, categories and offline icons.
Read more