aaap-repos Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth Attack Surface Mapping and Asset Discovery

appsec-browser-bundle

The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.

aquatone

A Tool for Domain Flyovers

arjun

HTTP parameter discovery suite.

assetfinder

Find domains and subdomains related to a given domain

astra

Automated Security Testing For REST API's

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-hacking-tools

Awesome Hacking Tools

awesome-oscp

A curated list of awesome OSCP resources

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bhg

Code samples for No Starch Press Black Hat Go

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

browser-sec-whitepaper

Cure53 Browser Security White Paper

bugbounty

All Things Bug Bounty

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

commonspeak

Content discovery wordlists generated using BigQuery

darthsidious

Building an Active Directory domain and hacking it

dashboard

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fuzz.txt

Potentially dangerous files

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gobuster

Directory/File, DNS and VHost busting tool written in Go