ayoubnajim Goto Github PK

90daysofdevops

This repository is my documenting repository for learning the world of DevOps. I started this journey on the 1st January 2022 and I plan to run to March 31st for a complete 90-day romp on spending an hour a day including weekends to get a foundational knowledge across a lot of different areas that make up DevOps.

aceldr

Cobalt Strike UDRL for memory scanner evasion.

aort

All in One Recon Tool for Bug Bounty

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

awesome-web-hacking

A list of web application security

awesome-web-security

🐶 A curated list of Web Security materials and resources.

ayoubnajim.github.io

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

azuregraph

Azure AD enumeration over MS Graph

blockchainpython

blockchain-based bitcoin network with python

breach-parse

A tool for parsing breached passwords

cloud-devsecops-learning

Collection of Cloud and DevSecOps learning resources

covid19

crapi

completely ridiculous API (crAPI)

cve-2022-0847dirtypipe-exploit

defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

demo-webgoat

devsecopsguides.github.io

DevSecOpsGuides

dragoncastle

A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.

flutter-ssl-pinning-bypass

Horangi tools for Android penetration testing

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

glass-web

havoc

The Havoc Framework

hyblab2021

Source code of the Hyblab 2021 projects

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

internalallthethings

Active Directory and Internal Pentest Cheatsheets

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

linux-privilege-escalation-resources

Compilation of Resources for TCM's Linux Privilege Escalation course