Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

grep rough audit - source code auditing tool

lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

一键提取安卓应用中可能存在的敏感信息。

Professional slash commands for Claude Code that provide structured workflows for software development tasks including code review, feature creation, security auditing, and architectural analysis.

An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Nginx日志安全分析脚本

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

Run a security scan on your server and identify common gaps. Get your VPS ready for production.

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.

Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Scripts to gather system configuration information for offline/remote auditing

Handshake cracker

Application Portfolio Auditor is a tool assessing cloud readiness, quality, and security of large sets of apps. It gathers and aggregates insights of multiple software analyzers.