imsroot Goto Github PK
Type: User
Bio: Eternal Cyber Security Student.
Type: User
Bio: Eternal Cyber Security Student.
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
All about bug bounty (bypasses, payloads, and etc)
Awesome Security lists for SOC/CERT/CTI
Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection
Awesome cloud enumerator
Cloud Security Posture Management (CSPM)
Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show how such a dashboard can be created.
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
Search for Directory Traversal Vulnerabilities
Hunting assets on the internet using favicon hashes
Dockerfile linter, validate inline bash, written in Haskell
Turns any junk text into a usable wordlist for brute-forcing.
Hardening Active Directory version 2
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
Super vulnerable todo list application
Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
Generates millions of keyword-based password mutations in seconds.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Unlock the power of Splunk SIEM for comprehensive log analysis. Collaborate and innovate with our Splunk Log Analysis Projects on GitHub
Automated OSINT on SwaggerHub
Tfsec is now part of Trivy
Awesome list of keywords and artifacts for Threat Hunting sessions
yara detection rules for hunting with the threathunting-keywords project
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.