Awesome Proxmox VE
Section: Security Tools & Best Practices
FreshScore 84
Entry
OpenSCAP
Appears in 4 awesome lists
The reference implementation of the SCAP (Security Content Automation Protocol) standard, NIST-certified and built into RHEL and derivatives. Evaluates OVAL vulnerability definitions and XCCDF benchmark profiles including CIS, PCI-DSS, STIG, and USGCB, with HTML and XML report generation. Supports…
Found in these lists
Hacking Tools
Section: Compliance & Auditing · The reference implementation of the SCAP (Security Content Automation Protocol) standard, NIST-certified and built into RHEL and derivatives. Evaluates OVAL vulnerability definitions and XCCDF benchmark profiles including CIS, PCI-DSS, STIG, and USGCB, with HTML and XML report generation. Supports…
FreshScore 91
Table of Contents
Section: Security Tools · is U.S. standard maintained by National Institute of Standards and Technology (NIST). It provides multiple tools to assist administrators and auditors with assessment, measurement, and enforcement of security baselines. OpenSCAP maintains great flexibility and interoperability by reducing the…
SlowScore 60
Static Analysis
Section: General · Suite of automated audit tools to examine the configuration and known vulnerabilities following the NIST-certified Security Content Automation Protocol (SCAP).
FreshScore 95
Often listed next to it
Wireshark
Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Wireshark is very similar to tcpdump, but has a graphical front-end, plus some integrated sorting and filtering options.
In 24 listsDetails
Nmap
A free, open-source network scanner used for discovering hosts, services, and vulnerabilities on computer networks through advanced port scanning and OS detection techniques.
In 13 listsDetails
Darkmoon
🟢⚠️ — Autonomous AI penetration-testing platform that orchestrates specialized web, AD, Kubernetes, CMS, and framework agents through an MCP-controlled Docker toolbox with local privacy-tokenization for sensitive target data. — note: GPL-3.0 licensed; heavy Docker/LLM stack, use only for…;…
In 11 listsDetails
pfSense
The most widely deployed open-source firewall with the largest community and extensive third-party documentation, built on FreeBSD with a browser-based management interface. Available in Community Edition (open source) and pfSense Plus (commercial). Known for extremely stable long-running…
In 10 listsDetails
Snort
Snort is a free and open source network intrusion prevention system (NIPS) and network intrusion detection system (NIDS)created by Martin Roesch in 1998. Snort is now developed by Sourcefire, of which Roesch is the founder and CTO. In 2009, Snort entered InfoWorld's Open Source Hall of Fame as one…
In 10 listsDetails
Kali Linux
Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), and Aircrack-ng (a…
In 10 listsDetails
Pi-hole
is a DNS sinkhole that protects your devices from unwanted content, without installing any client-side software, intended for use on a private network. It is designed for use on embedded devices with network capability, such as the Raspberry Pi, but it can be used on other machines running Linux…
In 7 listsDetails
Falco
CNCF graduated runtime security standard originally created by Sysdig, monitoring syscalls and Kubernetes audit events in real time using eBPF to detect suspicious behaviors like shells spawned inside containers, privileged container creation, and unexpected outbound connections.
In 7 listsDetails