awesome-security
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
Community-curated directory of security tools, libraries, books, and resources organized by category, a starting map for finding security tools and learning material, not software to install.
This repository is a community-maintained list of software, libraries, documents, books, and other resources about computer security. It follows the awesome-list format, which means it is not a program you install and run. Instead it is a categorized directory of links, each with a short one-line description, pointing to tools and reading material kept elsewhere. The README notes it was inspired by similar lists for PHP and Python, and it thanks the many contributors who have added entries over time.
The list is organized into broad sections. The Network section is the largest, with sub-groups for scanning and penetration testing, monitoring and logging, intrusion detection and prevention, honeypots, full packet capture and forensics, sniffers, security information and event management, VPNs, firewalls, anti-spam, and ready-made Docker images for security testing. Well-known entries here include Nmap for network discovery, the Metasploit Framework for exploit development, and Kali Linux, a Linux distribution that ships with many testing tools preinstalled.
Further sections cover Endpoint security (anti-virus, configuration management, authentication, mobile, and forensics), Threat Intelligence, Social Engineering, and Web security, the latter including web application firewalls and runtime protection. Additional shorter sections list resources for red team infrastructure, exploits and payloads, big data, DevOps, terminal tools, operating systems, datastores, fraud prevention, and free ebooks. A final section links out to other related awesome lists.
You would use this collection as a starting map when you want to find security tools or learning resources in a particular area and prefer a curated set of pointers over an open web search. The full README is longer than what was shown.
Where it fits
- Find network scanning and penetration testing tools without doing an open web search.
- Discover monitoring, logging, and intrusion detection tools for securing a server.
- Locate books and ebooks for learning a specific area of computer security.
- Find preconfigured Docker images for security testing workflows.