S

security-tools

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

VanitySearch is a tool designed for finding Bitcoin address prefixes. If you wish to generate a secure private key, please use the -s option to enter your passphrase; this passphrase will be used to generate a base key compliant with the BIP38 standard (e.g., VanitySearch.exe -s "my passphrase" 1MyPrefix). Alternatively, you can use the command VanitySearch.exe -ps "my passphrase", which incorporates an additional cryptographically secure seed into your passphrase. This update addresses bugs related to custom address matching and private key conversion, replaces the random number generator, introduces new search puzzles tailored to specific finite regions, and adds both "random" and "incremental" search modes. Furthermore, the -e option has been added to enable homomorphic properties—a feature that has been completely reimplemented—while the integration of the AVX2 instruction set optimizes CPU performance and enhances underlying logic.

Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan installed Linux packages and services for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan Docker images and containers for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Scan installed Windows software for known CVEs from PowerShell. Open source, auditable, privacy-first — powered by the ValtersIT CVE API.

Auto-import a live malicious-IP blocklist into nftables, ipset, fail2ban, pfSense and MikroTik RouterOS. Open source, privacy-first — powered by the ValtersIT Threat-IP feed.

Open-source CVE scanners for WordPress, Linux, Docker and Windows — one command, a list of the CVEs that affect your stack. Powered by the ValtersIT CVE API.

An explainable, offline-first, agent-native URL inspector — detects deceptive URLs and tells you exactly why, with no network

An educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host discovery, with a rich CLI.

Veracode Container/IaC/Secrets Scanning Component This Veracode Container/IaC/Secrets Scanning Component runs the Veracode-CLI on any GitLab pipeline

About The Container/IaC/Secrets Scanning Component is designed to be used in a CI/CD pipeline to scan a local folder, remote repository, image or archive for 3rd party library vulnerabilities, infrastructure as code misconfigurations and stored secrets.

For more information on Pipeline Scan visit Veracode Help Center Page: https://docs.veracode.com/r/Veracode_Container_Security

Veracode Pipeline Scan Component This Veracode Pipeline Scan component runs the Veracode pipeline-scan as an action on any GitHub pipeline

The only pre-requisites is to have the application compiled/packaged according the Veracode Packaging Instructions here

About The pipeline-scan component is designed to be used in a CI/CD pipeline to submit a binary or source code zip to Veracode for security scanning.

For more information on Pipeline Scan, visit the Veracode Docs.

Veracode SAST Packaging Component This component will run the Veracode CLI package command to prepare the repository for static code analysis. Generated artifacts will be stored behind the name veracode-artifacts.

Veracode Software Composition Analysis Component This Veracode Software Composition Analysis (agent-based scan) Component will run Veracode SCA agent based SCA solution.

Run the Veracode SCA similar as the script in textual output mode Ability to create issues for identified vulnerabilities without creating duplicates Ability to run the scan on a remote repository Ability to run the scan with the --quick flag

Run pre-defined development containers without remembering complex Docker/Podman CLI options. Define once, start anywhere.

An advanced retro-cybernetic custom firmware for the LilyGO T-Watch S3 Ultra (SCR Terminal). Features security research tools, BLE/WiFi recon, multi-protocol LoRa, an RTC-driven virtual pet, and browser Web Flasher support.

Herramienta OSINT modular personal (IP, telefono, username) con arquitectura de plugins

Nexora is an AI-driven enterprise endpoint governance and security intelligence platform that monitors software usage across organizational devices, applies deterministic policy-based risk classification, and transforms raw system activity into structured, auditable insights. It combines endpoint telemetry, policy enforcement, and explain-only AI analysis to give organizations real-time visibility into application behavior, improve compliance, and identify potential security risks without allowing AI to directly control enforcement decisions. https://roxanneardary.com/nexora/

Convert CycloneDX JSON or XML docs to PDF reports. Was designed to work for VEX reports but can also generate PDFs for standard BoMs.