The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
☆34Nov 5, 2026Updated this week
Alternatives and similar repositories for OWASP-Subtractive-Hardening-Top-10
Users that are interested in OWASP-Subtractive-Hardening-Top-10 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Sep 17, 2026Updated last month
- Community-maintained database of MCP server audit results and security assessments. Contains structured audit findings, compliance report…☆11Jul 14, 2026Updated 3 months ago
- Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.☆20Updated this week
- flareguard-cloudflare-security-audit☆17Sep 27, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Threat Modeling Manifesto☆31May 28, 2026Updated 5 months ago
- Official technical documentation for the VergeOS hyperconverged infrastructure (HCI) platform.☆15Oct 30, 2026Updated last week
- Tools for CES abuse☆50Sep 29, 2026Updated last month
- explainshell.com cli☆10Aug 7, 2014Updated 12 years ago
- Take advantage of some more advanced Windows Defender settings.☆77Oct 7, 2026Updated last month
- OWASP GenAI Data Security Initiative — taxonomies, crosswalks, datasets, and tooling for securing data in generative AI systems☆30Nov 2, 2026Updated last week
- It’s Giving Insecure Vibes: Secure Coding Literacy for Vibe Coders☆26Sep 30, 2026Updated last month
- ☆27Feb 19, 2026Updated 8 months ago
- A Burp Suite jython extension that saves a URL List from the Burp Proxy History or Burp Target Site Map as a text file.☆10Jun 11, 2013Updated 13 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆11Dec 18, 2023Updated 2 years ago
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- Deception LLM Guardrail that deceives perceived adversarial queries instead of refusing them.☆14Apr 15, 2026Updated 6 months ago
- Port of LSA-Whisperer by Evan McBroom / SpecterOps to the Adaptix C2 BOF framework.☆12Mar 6, 2026Updated 8 months ago
- Tools for inspecting iOS firmware images☆17Feb 12, 2019Updated 7 years ago
- Unofficial libvirt patch for the free SpecterOps Kubernetes for Red Teamers lab☆14Aug 29, 2026Updated 2 months ago
- fully autonomous credential intelligence platform that discovers, │ │ extracts, correlates, verifies, and reports exposed secrets acro…☆18May 10, 2026Updated 6 months ago
- For fluentd.org☆12Updated this week
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A baseline configuration and guidelines for securing source code repositories, covering branch protection, access controls, secret scanni…☆10May 8, 2026Updated 6 months ago
- safer-dependencies is a security layer for Claude Code that audits packages before they’re added to your project. It detects and fixes ri…☆43Aug 31, 2026Updated 2 months ago
- A Mythic C2 Profile that uses AWS S3 for command and control communication with per-execution credential isolation.☆15Mar 14, 2026Updated 7 months ago
- Offline LLM app for iPhone: run open models from Hugging Face on-device with llama.cpp, MLX, Core ML and Apple Foundation Models. No acco…☆13Updated this week
- This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommen…☆53Sep 5, 2026Updated 2 months ago
- ☆22Updated this week
- MasTKO is a security tool which detects DNS entries associated with AWS’s EC2 servers susceptible to takeover attack and attempts a takeo…☆11Jun 14, 2023Updated 3 years ago
- Open-Source AI Governance Frameworks & Compliance SOPs for responsible AI development, risk mitigation, and ethical oversight. Ensuring t…☆18Aug 10, 2026Updated 2 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆122Sep 10, 2026Updated last month
- OWASP Foundation Web Respository☆13Oct 2, 2025Updated last year
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Check your AWS CLI commands for security risks before you run them.☆35Apr 1, 2026Updated 7 months ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI …☆19Jul 21, 2026Updated 3 months ago
- A web application to parse and analyse Snaffler & Group3r output providing filtering capabilities in a nice interactive interface.☆11Sep 16, 2026Updated last month
Are these results useful?