dstrozynski Goto Github PK

arachni

Web Application Security Scanner Framework

awesome-symbolic-execution

A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

build-scripts

Build scripts used to prepare self-contained packages of Arachni.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

graudit

grep rough audit - source code auditing tool

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kube-score

Kubernetes object analysis with recommendations for improved reliability and security

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

math-as-code

a cheat-sheet for mathematical notation in code form

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-book

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

prowler

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

pwntools

CTF framework and exploit development library

quasarrat

Remote Administration Tool for Windows

runbooks

Runbooks for different topics

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-training

Public version of PagerDuty's employee security training courses.

testssl.sh

Testing TLS/SSL encryption anywhere on any port

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙