codethatrocks Goto Github PK

actions2aws

Assume AWS IAM roles from GitHub Actions workflows with no stored secrets

angular-demo

Created with StackBlitz ⚡️

asvs

Application Security Verification Standard

cvelist

Pilot program for CVE submission through GitHub

deeper-sast-demo

defending-devops

Lab Material for the Two-Day Defending Modern DevOps Environments Course

demo-vulnerable-springboot-app

devsecops-maturitymodel

holisticinfosec-for-webdevelopers-fascicle1

:books: VPS :lock: Network :lock: Cloud :lock: Web Applications :books:

image-upload-exploits

This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

owasp-masvs

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

privesc

Privilege escalation tools on Mainframe

px

An HTTP proxy server to automatically authenticate through an NTLM proxy

python-fitbit

Fitbit API Python Client Implementation

racf-passticket-generator

A prototype implementation of the RACF PassTicket algorithm in Java.

scan-spring-go

针对SpringBoot的渗透工具，Spring漏洞利用工具

scripts

Scripts I use during pentest engagements.

teamdojo

UI für verschiedene Reifegrad-Dimensionen

terraform-aws-cross-account-persistence

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

threatspec

ThreatSpec - Continuous threat modelling through code - https://threatspec.org

webgoat

WebGoat 8.0

winscppasswd

WinSCP Password Extractor/Decrypter/Revealer written in go language