Awesome Security

A collection of awesome software, libraries, documents, books, resources and cool stuff about security.

Inspired by awesome-php, awesome-python.

Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven collection of very well-known resources.

• Awesome Security
• Network
  • Scanning / Pentesting
  • Monitoring / Logging
  • IDS / IPS / Host IDS / Host IPS
  • Honey Pot / Honey Net
  • Full Packet Capture / Forensic
  • Sniffer
  • Security Information & Event Management
  • VPN
  • Fast Packet Processing
  • Firewall
  • Anti-Spam
  • Docker
• Endpoint
  • Anti-Virus / Anti-Malware
  • Content Disarm & Reconstruct
  • Configuration Management
  • Authentication
  • Mobile / Android / iOS
  • Forensics
• Threat Intelligence
• Social Engineering
• Web
  • Organization
  • Web Application Firewall
  • Scanning / Pentesting
  • Runtime Application Self-Protection
  • Development
• Red Team Infrastructure Deployment
• Exploits & Payloads
• Usability
• Big Data
• DevOps
• Terminal
• Operating Systems
  • Online resources
• Datastores
• Fraud prevention
• EBooks
• Other Awesome Lists
  • Other Security Awesome Lists
  • Other Common Awesome Lists
• Contributing

---

Network

Network architecture

• Network-segmentation-cheat-sheet - This project was created to publish the best practices for segmentation of the corporate network of any company. In general, the schemes in this project are suitable for any company.

Scanning / Pentesting

• OpenVAS - OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
• Metasploit Framework - A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
• Kali - Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), and Aircrack-ng (a software suite for penetration-testing wireless LANs).
• tsurugi - heavily customized Linux distribution that designed to support DFIR investigations, malware analysis and OSINT activities. It is based on Ubuntu 20.04(64-bit with a 5.15.12 custom kernel)
• pig - A Linux packet crafting tool.
• scapy - Scapy: the python-based interactive packet manipulation program & library.
• Pompem - Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases: Exploit-db, 1337day, Packetstorm Security...
• Nmap - Nmap is a free and open source utility for network discovery and security auditing.
• Amass - Amass performs DNS subdomain enumeration by scraping the largest number of disparate data sources, recursive brute forcing, crawling of web archives, permuting and altering names, reverse DNS sweeping and other techniques.
• Anevicon - The most powerful UDP-based load generator, written in Rust.