4ppsec

virustotal-api-v2

Python scripts to interact with the virustotal.com Public API

RainbowMaker

RainbowMaker, Hash cracking & Creating Rainbow Tables

kingpin

TCP Proxy that helps bypassing certificate pinning

PathTraverser

OWASP Path Traverser

bheu19-alexa-serverless-hack

Materials from my talk at BlackHat EU 2019: Alexa, Hack My Server(less) Please

iNalyzer

iOS Penetration Testing Framework

Advanced_Packet_Editor

The Advanced Packet Editor (APE) is an open-source project for a TCP and HTTP based proxy that allows you to intercept and manipulate communication between clients and servers

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

aws-cf-templates

Free Templates for AWS CloudFormation

btlejuice

BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework

btproxy

Man in the Middle analysis tool for Bluetooth.

commix

Automated All-in-One OS command injection and exploitation tool.

droidbox

Automatically exported from code.google.com/p/droidbox

gattacker

Lambda-IAM-Audit

This script scans Lambda functions to identify IAM roles with wildcards (*) policies

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

owasp-threat-dragon-demo

Demo models for OWASP Threat Model

owasp-top-10-serverless

How OWASP Top 10 (2017) Stack up in Serverless

random-name

serverless

Serverless Framework – Build web, mobile and IoT applications with serverless architectures using AWS Lambda, Azure Functions, Google CloudFunctions & more! –

www-project-api-security

OWASP Foundation Web Respository