Security Auditing

Sherlock is a software that helps you hunt down social media accounts by username across social networks. It is a powerful tool for investigators, researchers, and anyone looking to find online profiles. The software is designed to be easy to use and provides accurate results.

✦ Best for researchers and casual investigators

Wazuh is an open-source security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. It offers a comprehensive solution for threat detection, incident response, and security monitoring. Wazuh is designed to help organizations detect and respond to security threats in real-time, reducing the risk of data breaches and cyber attacks.

✦ Best for large-scale enterprise security teams

Shhgit is a tool designed to find secrets in your code. It scans your repositories for sensitive information that could compromise your security. By using shhgit, you can identify and remove secrets before they fall into the wrong hands.

✦ Best for small dev teams and open-source projects

CyberChef is a web-based tool that lets security professionals and researchers quickly transform, decode, and analyze data using a simple drag‑and‑drop interface. It runs entirely in the browser, so no installation is required and your data never leaves your machine unless you choose to share it. With hundreds of built‑in operations ranging from encryption and compression to encoding and forensic analysis, CyberChef streamlines complex workflows into repeatable recipes, making it ideal for incident response, malware analysis, and data forensics.

✦ Best for security analysts needing quick, shareable browser‑based data transforms

mitmproxy is an open‑source, console‑based proxy that lets security researchers and developers intercept, inspect, modify, and replay network traffic. It runs on Windows, macOS, Linux and can be accessed via a web UI for convenient analysis. The tool supports HTTP, HTTPS, and WebSocket protocols, offering powerful scripting capabilities in Python to automate testing and debugging. Being free and self‑hosted, it integrates easily into CI pipelines and local development environments.

✦ Best for security researchers needing deep, scriptable traffic manipulation

RuView is an open‑source Rust project that turns everyday WiFi radio signals into a privacy‑preserving sensing medium. By analyzing how those signals are disturbed, it can detect presence, occupancy, and even vital signs like breathing and heart rate without any camera. Designed for developers and researchers, RuView runs in the cloud and can be accessed via a web interface, making it easy to integrate into ambient‑sensing experiments and applications while keeping data private.

✦ Best for wifi-enabled space researchers