takester Goto Github PK

firmwire

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

github-sensitive-data-exposure-keywords

Github Search Keywords

gobyvuls

Vulnerabilities of Goby supported with exploitation.

guide-ceh-practical-master

hackthebox

Notes Taken for HTB Machines & InfoSec Community.

hpandro1337

Repository for download all version of @hpAndro1337 (Android AppSec) application. All application listed on play store. https://play.google.com/store/apps/dev?id=7722940558815307513

ijkplayer

Android/iOS video player based on FFmpeg n3.4, with MediaCodec, VideoToolbox support.

kiterunner

Contextual Content Discovery Tool

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

ledgersmb

Repository for the LedgerSMB project -- web app for accounting & ERP

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

mitra

A generator of weird files (binary polyglots, near polyglots...)

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

name-that-hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

onaws

Fetch the details of assets hosted on AWS.

opencart

A free shopping cart system. OpenCart is an open source PHP-based online e-commerce solution.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

page-fetch

Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pages and see the returned values

penetration-testing-tools

A collection of more than 160+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

phantom-evasion

Python antivirus evasion tool

php-static-analysis-tools

A reviewed list of useful PHP static analysis tools

pwn_jenkins

Notes about attacking Jenkins servers

python-deserialization-attack-payload-generator

Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.

rainfall

Binary Exploitation and Reverse-Engineering (from assembly into C)

recon_automation