capkhanhduy Goto Github PK

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

awesome-reversing

A curated list of awesome reversing resources

awesome-web-hacking

A list of web application security

bearded

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

cheatsheets

Penetration Testing/Security Cheatsheets

codewarrior

Just another manual code analysis tool and static analysis tool

dracnmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform various automatic scanning techniques with the advanced commands.

dradisframework

Official repo of the Dradis Framework

droidreverse

reverse engineering tools for android（android 逆向工程工具集）

fuzzdb

Official FuzzDB project repository

hackazon

A modern vulnerable web app

lazagne

Credentials recovery project

lynis

Lynis - Security auditing tool and assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Works on Linux, Mac OS, and Unix based systems, with installation being optional.

metasploit-framework

Metasploit Framework

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

nymeria

nymeria-1

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pefile

Automatically exported from code.google.com/p/pefile

pentestpackage

a package of Pentest scripts I have made or commonly use

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

python-fud-payload

Python payload that bypass antivirus detection

pythonpentest

A repository for large scripts from my book.

retroscope

Public release of the RetroScope Android memory forensics framework

routersploit

The Router Exploitation Framework