--- title: 'Security Software' url: 'https://grav.munn.me/software-i-love/security-software' markdown: 'https://grav.munn.me/software-i-love/security-software.md' date: '2025-08-13' description: 'Information Security Programs This is a page of infosec related software. The listings were getting too long on the main website. Link Description Platform Rating faraday Open source vuln management platform linux 4 osv-scanner better way of triaging vulns from google linux ? caretta Le…' --- # Information Security Programs This is a page of infosec related software. The listings were getting too long on the main website. | Link | Description | Platform | Rating | |---|---|---|---| | [faraday](https://github.com/infobyte/faraday) | Open source vuln management platform | linux | 4 | | [osv-scanner](https://github.com/google/osv-scanner) | better way of triaging vulns from google | linux | ? | | [caretta](https://github.com/groundcover-com/caretta) | Lets you visualize k8s dependency graphs | linux | 4 | | [bpfmon](https://github.com/bbonev/bpfmon) | A tcpdump co-tool that lets you see HOW MUCH with bpf packets. It graphs usage. | linux | 5 | | [ronin](https://ronin-rb.dev/faq/) | Security toolkit written in ruby | linux | ? | | [chainguard](https://www.chainguard.dev/community) | Software Supply chain security | various | ? | | [security-guard](https://pkg.go.dev/knative.dev/security-guard#section-readme) | Kubernetes knative host protector | varius | ? | | [MISP](https://github.com/MISP/MISP) | lets you share threat intelligence | various | 4 | | [openziti](https://docs.openziti.io/) | zero trust secure network and file sharing | various | 4 | | [zrok](https://blog.openziti.io/introducing-zrok) | uses above for file sharing securely p2p | various | 4 | | [rafis](https://www.rafis.eu/documentation) | European framework for evaluating risk | variou | ? | | [rafi](https://gitlab.com/hsleisink/ravib)[b](https://gitlab.com/hsleisink/ravib) | another risk evaluation ramework in php | various | | | [age](https://nixfaq.org/2021/01/age-the-modern-alternative-to-gpg.html) | modern encyrptor replacement for gpg | various | 4 | | [sniffnet](https://github.com/GyulyVGC/sniffnet.git) | network sniffer graphical | VARIOUS | 5 | | [zxcvbn](https://github.com/dropbox/zxcvbn?ref=scott-helme) | password strength estimator | various | 4 | | [kali purple](https://debugpointnews.com/kali-linux-2023-1/?amp=1) | Pen testing suite | various | 5 | | [signway](https://github.com/gabotechs/signway) | lets you interpose 'mitm' proxying for api calls and gets around 'post' limitation. | | | | [logparser](https://github.com/logpai/logparser) | uses ai to auto classify and enrich logfiles | various | 4 | | [lmtuner](https://wengsyx.github.io/LMTuner/) | ai llm tuner for large language models | various | ? | | [nsjail](https://nsjail.dev/) | lets you jail network processes on linux | linux | ? | | [ja4 Network printing](https://blog.apnic.net/2023/11/22/ja4-network-fingerprinting/) | Lets you fingerprit with the new standard | linux | | | [keyleSSH](https://github.com/tide-foundation/KeyleSSH) | keyless ssh client via tide | linux | ? | | [docuseal](https://www.docuseal.co/install) | Lets you sign you own pdfs | linux | ? | | [apparmour howto](https://www.maketecheasier.com/understanding-apparmor-in-ubuntu-linux/) | tells you how to use apparmour | linux | ? | | [netbox](https://github.com/netbox-community/netbox) | network inventory source of truth | linux | ? | | [nmap formatter](https://github.com/vdjagilev/nmap-formatter?tab=readme-ov-file) | Formats nmap output and pretty prints it | linux | ? | | [sqlite-schema-diagram](https://gitlab.com/Screwtapello/sqlite-schema-diagram/) | makes a graphical schema of a sqlite database | linux | 5 | | [tracecat](https://github.com/TracecatHQ/tracecat) | a hunting / splunk like framework | linux | ? | | [siglens](https://github.com/siglens/siglens) | log sink 100x more efficient than splunk | linux | ? | | [fuzz testing](https://pages.cs.wisc.edu/~bart/fuzz/) | a newer way to fuzz test | linux | ? | | [how to sign a debian kernel 2023](https://ursache.io/posts/signed-kernel-module-debian-2023/) | how to sign kernel images | linux | ? | | [bincapz](https://github.com/chainguard-dev/bincapz) | enumerate binary capabilties | linux | ? | | [pipexec](https://github.com/flonatel/pipexec) | fancy pants pipe examples | linux | ? | | [openapi-tui](https://github.com/zaghaghi/openapi-tui) | text user interface to explore openapi/swagger definitions | linux | ? | | [InspectreGadget](https://vusec.github.io/inspectre-gadget/quickstart.html) | So much for 'confidential computing' | linux | 5 | | [bubblebox](https://www.ralfj.de/blog/2024/04/14/bubblebox.html) | Bubblejail Bubblebox create a secure container for your browser in linux | linux | 4 | | [paxtest](https://github.com/opensrcsec/paxtest/) | tests your system for various memory and stack vulnerabilities | linux | 5 | | [osv](https://osv.dev/) | mostly a search engine for vulnerabilities | really all of them | not a program! | | [yara-x](https://virustotal.github.io/yara-x/blog/yara-is-dead-long-live-yara-x/) | a vulnerabiltiy pattern match hickey written in rust. | linux | ? | | [flawz](https://github.com/orhun/flawz) | tui for searching cve and flaws | linux | ? | | [sanctorum](https://sanctorum.se/sanctum/) | REALLY weird vpn daemon which seems partially modeled after templeos | linux | ? | | [samltracer](https://developer.okta.com/docs/guides/saml-tracer/main/) | a SAML debugger for when you absolutely, positively be there overnight. | various browsers | 5 | | [stepping stone](https://github.com/nccgroup/SteppingStones?utm_source=cloudseclist.com&utm_medium=referral&utm_campaign=CloudSecList-issue-242) | a record keeper for red teams | | ? | | [extensiontotal](https://www.extensiontotal.com/) | tests the security of visual code studio plugins | | 4 | | [imhex](https://github.com/WerWolv/ImHex) | graphical reverse engineering tool | | 4 | | [age-plugins](https://words.filippo.io/dispatches/age-plugins/) | interesting plugins for the age encryptor | | 4 | | [open sourced wafs](https://fosspost.org/open-source-waf-web-application-firewalls) | mostly wafs. | | 5 | | [sshamble](https://github.com/runZeroInc/sshamble/) | ssh attack research and development project | | 4 | | [narrowsh](https://github.com/ColumPaget/narrowsh) | restricted shell for ssh | linux | ? | | [binsider](https://binsider.dev/) | elf binary dissector with tyi | linux | 5 | | [sslsplit](https://github.com/droe/sslsplit) | Lets you inspect tls traffic by cloning it and then decrypting | linux | 5 | | [polarproxy](https://www.netresec.com/?page=PolarProxy) | same | linux | 5 | | [bpf keylogger](https://github.com/pythops/tamanoir) | uses ebpf to log keystrokes | linux | 4 | --- ## Navigation - Parent: [Software I Love](https://grav.munn.me/software-i-love.md) - Next: [RetroCade / Retro Arcade](https://grav.munn.me/software-i-love/retrocade-retro-arcade.md)