nixwizard Goto Github PK

api-securityempire

API Security Project aims to present unique attack & defense methods in API Security field

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

belcher

Automated BurpSuite testing

cve-2018-15365

cve-2019-5736-poc

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

django-moth

A Django vulnerable Web application for testing the w3af framework

dockercloud-authorizedkeys

Adds a user public SSH key to the host's ~/.ssh/authorized_keys via docker container

dockerrootplease

Gives you root on the hostOS, if you're a member of the 'docker' group.

flask_test

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

kube-alien

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

kubeletmein

Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.

kubernetes-security-checklist

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

linux-privilege-escalation-mindmap

OSCP Privilege Escalation MindMap/Guide

mindmaps

:mag: Mindmaps for threat hunting - work in progress.

regolibrary

sqlmap

Automatic SQL injection and database takeover tool

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.