an2ni Goto Github PK

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

archerysec

Open Source Vulnerability Assessment and Management helps developers and pentesters to perform scans and manage vulnerabilities.

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

awesome-selfhosted

This is a list of Free Software network services and web applications which can be hosted locally. Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.

awesome-soc

A collection of sources of documentation, as well as field best practices, to build/run a SOC

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

credit-card-finder

Powershell script for discovering credit cards on a Windows machine

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

cuckoo3

Cuckoo 3 is a Python 3 open source automated malware analysis system.

devsecops-maturitymodel

devsecops-studio

Virtual environment for learning DevSecOps

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration application

dns-hunting

Use DNS to hunt for threats including DGAs

fir

Fast Incident Response

funplug

A repository to collect all compiler scripts for the fun_plug

geoip-attack-map

Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.

git-workshop

Git 101 with a little twist of DevSecOps

gwt-maven-example

A working example combining a multi-project maven build together with GWT 2

hijacker

Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

ipobfuscator

A simple too to convert the IP to a DWORD IP

krackattacks-test-ap-ft

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

malwless

Test Blue Team detections without running any attack.

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

passionfruit

[WIP] Crappy iOS app analyzer

pcapxray

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction