Security & Antivirus
Windows listings in Security & Antivirus.
jwt-term
jwt-term is an offline-first command-line utility for inspecting, validating, and manipulating JSON Web Tokens.
kubescape
kubescape scans Kubernetes clusters, YAML files, and Helm charts for security issues.
lego
lego is a client library and command-line tool for obtaining and managing certificates through the ACME protocol.
med
med is a command-line tool for masking, encrypting, and decrypting data in CSV and JSON files.
metasploit-framework
Metasploit Framework is a framework used for penetration testing.
msrt
MSRT, the Windows Malicious Software Removal Tool, finds and removes prevalent malicious software and reverses changes made by those threats.
nancy
Nancy checks Go project dependencies for known vulnerabilities using a vulnerability data source.
nuclei
Nuclei is a customizable vulnerability scanner based on a simple YAML-defined domain-specific language.
ojo
ojo is a security scanner for software dependencies, secrets, misconfiguration, and code.
openark
OpenArk is a Windows anti-rootkit tool. A rootkit is malicious software that can conceal activity or maintain privileged access, and anti-rootkit software is used to look for this kind of threat.
osquery
osquery uses SQL to inspect, monitor, and analyze operating-system information.
osv-scanner
OSV-Scanner finds known vulnerabilities affecting a project’s dependencies.
pe-sieve
PE-sieve scans a specified running process for signs of potentially malicious implants and can dump identified material for analysis.
peid
PEiD detects common packers, cryptors, and compilers in Portable Executable (PE) files.
pinact
pinact is a command-line utility for editing GitHub workflow and composite-action files.
polsedit
Polsedit is a utility for modifying user policies on local or remote systems.
prick
prick is a self-hosted secrets manager for small teams.
rPGP
rPGP is a graphical application for managing OpenPGP certificates and keys.
regula
Regula evaluates infrastructure-as-code files for potential security and compliance violations before deployment.
secRMM
secRMM is a security management utility focused on removable media such as portable storage devices.
securefs
securefs creates a user-space filesystem that transparently encrypts files as they are written and decrypts them when they are read.
shasum
Shasum is an approximation of the Unix `shasum` command.
sops
SOPS edits encrypted configuration files in formats including YAML, JSON, ENV, INI, and binary data.
ssh-audit
ssh-audit is a tool for auditing the configuration of SSH servers and clients, with attention to cryptographic security.
sslscan
sslscan tests services that have SSL or TLS enabled and discovers which cipher suites they support.
step-ca
step-ca is a private certificate authority and ACME server for automated certificate management.
step-desktop
step-desktop is a graphical interface for managing device identity through the step-agent daemon.
tfsec
tfsec is a static analysis security scanner for Terraform code.
trufflehog
TruffleHog is a tool for finding leaked credentials.
urlscan-cli
urlscan-cli is a command-line interface for the urlscan.io API.
vigolium
Vigolium is a command-line tool for web vulnerability scanning and traffic analysis.
winchecksec
WinCheckSec statically detects security mitigations in executable files.
xxUSBSentinel
xxUSBSentinel turns a mapped USB device into a physical kill switch for a Windows computer.
yubikey-manager-qt
YubiKey Manager Qt is a graphical application for configuring a YubiKey through its USB interfaces.
yubikey-personalization
yubikey-personalization is a command-line tool for configuring hardware security keys, including setting an AES key.
zg-zsso
zg-zsso is a single sign-on system that lets multiple web applications share one set of user accounts.
