npm
dotenvx/dotenvx
a secure dotenv–from the creator of `dotenv`
BSD-3-Clause2026年8月28日 · 指标 2.10.0
全部标签
目录标签
#security-tools
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
137 条记录
Go
goshs-labs/goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
MIT2026年8月13日 · 指标 2.10.0
Go
kontext-security/kontext
Secure agents in seconds with permissions enforced at runtime.
MIT2026年9月4日 · 指标 2.10.0
Go
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Apache-2.02026年8月7日 · 指标 2.10.0
PyPI
Keeper-Security/Commander
Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.
MIT2026年7月17日 · 指标 2.10.0
crates.io
biandratti/huginn-net
Multi-protocol passive fingerprinting library: TCP/HTTP (p0f-style) + TLS (JA4-style) analysis in Rust
Apache-2.02026年7月26日 · 指标 2.10.0
—
duggytuxy/syswarden
SysWarden is a host-local security orchestrator combining authoritative nftables policy, HIDS/HIPS telemetry, bounded threat intelligence, out-of-band WAAP log analysis, authenticated high availability and a native terminal dashboard.
GPL-3.02026年9月5日 · 指标 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MIT2026年8月20日 · 指标 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.02026年9月5日 · 指标 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.02026年7月30日 · 指标 2.10.0
npm
yowainwright/codependence
Stop wrestling with code dependencies. Use Codependence! 🤼♀️
MIT2026年8月1日 · 指标 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.02026年8月5日 · 指标 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.02026年8月22日 · 指标 2.10.0
Go
authzed/spicedb-operator
Kubernetes controller for managing instances of SpiceDB
Apache-2.02026年7月17日 · 指标 2.10.0
npm
motdotla/dotenv
Loads environment variables from .env for nodejs projects.
BSD-2-Clause2026年8月4日 · 指标 2.10.0
npm · PyPI
openshield-org/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MIT2026年8月4日 · 指标 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MIT2026年8月24日 · 指标 2.10.0
npm
michelonsouza/encrypt-storage
EncryptStorage provide a little more security in frontend
MIT2026年8月28日 · 指标 2.10.0
NuGet
microsoft/ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
MIT2026年8月28日 · 指标 2.10.0
Go · npm
xalgord/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
MIT2026年7月17日 · 指标 2.10.0
RubyGems
0dayInc/pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
MIT2026年9月5日 · 指标 2.10.0
Go · PyPI
GreenmaskIO/greenmask
Database anonymization and test data management
Apache-2.02026年8月26日 · 指标 2.10.0
crates.io
Karib0u/rustinel
Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
Apache-2.02026年8月4日 · 指标 2.10.0
PyPI
pglombardo/pwpush-cli
Password Pusher CLI
MIT2026年8月5日 · 指标 2.10.0
npm
lirantal/anti-trojan-source
Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
Apache-2.02026年7月18日 · 指标 2.10.0
PyPI
zizmorcore/zizmor-pre-commit
A pre-commit hook for zizmor.
自定义许可证2026年7月22日 · 指标 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
自定义许可证2026年8月4日 · 指标 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.02026年7月17日 · 指标 2.10.0
Go · npm
opt-nc/geol
Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API
Apache-2.02026年7月19日 · 指标 2.10.0
—
Asymptote-Labs/agent-beacon
Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.
MIT2026年7月15日 · 指标 2.10.0