krouser Goto Github PK

pen_test_tools_script_resources

pentest_tools

A collection of awesome penetration testing resources, tools and other shiny things

pentesting

Tricks for penetration testing

poodr-notes

Notes for Sandi Metz's OOD book: "Practical Object-Oriented Design in Ruby."

powershell

PowerShell for every system!

powershell-suite

My musings with PowerShell

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

python-mini-projects

A collection of simple python mini projects to enhance your python skills

python-securitycenter

race-conditional-vulnerable-web-application-

This application is developed to test the race condition vulnerability in the web application. We have discussed about this vulnerability in our blog.

rbac-lookup

Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

rbac-tool

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redis-rb

A Ruby client library for Redis

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

reloader

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

repo-security-scanner

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

roadtools

The Azure AD exploration framework.

sample-app

Sample Application used to demonstrate GitOps driven deployment

sample-app-deployment

Sample Application used to demonstrate GitOps driven deployment

samples

JavaFX samples to run with different options and build tools

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secretserversecretstealer

Powershell script that decrypts the data stored within a Thycotic Secret Server

security

Stuff about it-security that might be good to know

security-analytics

Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud