0xc0da

netdata

The open-source observability platform everyone needs!

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

nightmare

A high-level browser automation library.

Newtonsoft.Json

Json.NET is a popular high-performance JSON framework for .NET

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

cJSON

Ultralightweight JSON parser in ANSI C

orleans

Cloud Native application framework for .NET

Hangfire

An easy way to perform background job processing in .NET and .NET Core applications. No Windows Service or separate process required

SignalR

Incredibly simple real-time web for .NET

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

HUNT

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

Free_CyberSecurity_Professional_Development_Resources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

Security_list

Great security list for fun and profit

graudit

grep rough audit - source code auditing tool

NetRipper

NetRipper - Smart traffic sniffing for penetration testers

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

SessionGopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

firmwalker

Script for searching the extracted firmware file system for goodies!

Tokenvator

A tool to elevate privilege with Windows Tokens

JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

powersap

Powershell SAP assessment tool

jython-burp-api

Develop Burp extensions in Jython

macos_shell_memory

Execute MachO binaries in memory using CGo

afl-fuzzing-demos

Fuzzing things with afl and python-afl

DefCon_RESTing

Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro

PreliminaryBackdoorLnkMacroStager

Original testing version of the backdoorLnkMacroStager - please reference backdoorLnkMacroStagerObfuscated or backdoorLnkMacroStagerCellEmbed for current versions