inosec Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

access-brute-forcer

Android v7+ application to perform a dictionary brute force attack against a host.

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

allthethings

Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

anew

A tool for adding new lines to files, skipping duplicates

apt_report

Interesting apt report collection and some special ioc express

arc

A manager for your secrets.

assetfinder

Find domains and subdomains related to a given domain

atlas

Quick SQLMap Tamper Suggester

attifyos

Attify OS - Distro for pentesting IoT devices

authcov

Web app authorization coverage scanning

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awsburpcollaborator

Deploy a Private Burpsuite Collaborator using boto3 Python Library

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bcscope

Get the scope of your bugcrowd programs

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

berserker

A list of useful payloads for Web Application Security and Pentest/CTF

bettercap-proxy-modules

This repository contains some bettercap transparent proxy example modules.

bitvijays.github.io-sphinx

Sphinx

bookmarkit

bounty

Misc bounty and vulndisc things

brida

The new bridge between Burp Suite and Frida!

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-hunting-web-security

Source Code for 'Bug Bounty Hunting for Web Security' by Sanjib Sinha

bugmenot

Get shared credentials for your bug bounty targets or for anything else

bumblebee-sleep-mode-script

A script for creating a service because bumblebee stop nvidia working after sleep mode

burp-to-sqlmap

Performing SQLInjection test on Burp Suite Bulk Requests using SQLMap