santhoshinty Goto Github PK

git-secret

Go scripts for finding sensitive data like API key / some keywords in the github repository

gitminer

Tool for advanced mining for content on Github

gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

grype

A vulnerability scanner for container images and filesystems

hacker101

Hacker101

hackerone-reports

Top disclosed reports from HackerOne

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

headi

Customisable and automated HTTP header injection

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

iot-pt

A Virtual environment to Pentest IoT Devices

iotgoat

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

jadx

Dex to Java decompiler

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

jupyter-threat

k8sthreatmodeling

Threat Modeling (based on STRIDE approach) for Kubernetes systems.

keychain-dumper

A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken

lazycsrf

A more useful CSRF PoC generator on Burp Suite

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

mariana-trench

Our security focused static analysis tool for Android and Java applications.

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

node-multiplayer-snake

DevSecOps training, application code

nodejsscan

NodeJsScan is a static security code scanner for Node.js applications.

objection

📱 objection - runtime mobile exploration

openvas-docker

A Docker container for Openvas

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF