Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

270 results

klar

optiopay/klar

Integration of Clair and Docker Registry

configuration-auditingcontainer-securitydevsecops+1

5032 years ago

so-crates

dougburks/so-crates

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

container-securitydigital-forensicseducation+8

58312 days ago

hacker-container

madhuakula/hacker-container

The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Containers,…

cloud-securitycontainer-securitypenetration-testing+1

2943 years ago

Threat_Model_Examples

taleliyahu/threat_model_examples

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…

ai-securityapi-securitycloud-security+6

5171 year ago

terrier

heroku/terrier

Terrier is a Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files…

container-securityhash-analysissupply-chain-security+1

2273 months ago

awesome-linux-attack-forensics-purplelabs

cr0nx/awesome-linux-attack-forensics-purplelabs

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

container-securitycurated-resourcesdigital-forensics+8

3423 years ago

dockerized-android

cybersecsi/dockerized-android

A container-based framework to enable the integration of mobile components in security training platforms

android-securitycontainer-securityeducation+2

1873 years ago

cve-2019-5736-poc

q3k/cve-2019-5736-poc

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

container-escapecontainer-securityexploitation+2

2107 years ago

Presentations

star-sg/presentations

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

binary-exploitationcontainer-securitycurated-resources+6

1372 months ago

chaostoolkit-kubernetes

chaostoolkit/chaostoolkit-kubernetes

Kubernetes driver extension of the Chaos Toolkit probes and actions API

chaos-engineeringcloud-infrastructure-securitycontainer-security+1

1912 years ago

bento

himazawa/bento

Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.

container-securityctfexploitation+4

765 years ago

OWASP-Subtractive-Hardening-Top-10

owasp/owasp-subtractive-hardening-top-10

The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…

ai-securitycloud-securitycontainer-security+6

2718 days ago

insject

nccgroup/insject

insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.

container-escapecontainer-securitypenetration-testing+1

504 years ago

airgap

xtuc/airgap

Security for the modern age of AI: defend against bad AI agents and malicious npm packages

ai-securitycontainer-securitydefensive-tools+3

154 days ago

trivy-plugin-kubectl

aquasecurity/trivy-plugin-kubectl

A Trivy plugin that scans the images of a kubernetes resource

cloud-securitycontainer-securitydevsecops+1

252 years ago

teampcp-supply-chain-attack

ugurrates/teampcp-supply-chain-attack

CVE-2026-33634 (CVSS 9.4) — The most impactful CI/CD supply chain attack of 2026 so far.

cloud-securitycontainer-securitycurated-resources+5

121 month ago

POC-2020-8559

tabbysable/poc-2020-8559

Proof of Concept exploit for Kubernetes CVE-2020-8559

cloud-securitycontainer-securityexploitation+3

206 years ago

abstractshimmer

nccgroup/abstractshimmer

Proof of concept for CVE-2020-15257 in containerd.

cloud-securitycontainer-escapecontainer-security+3

185 years ago