6mile

DevSecOps-Playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

commit-audit

Shell script that checks if git commits are signed

git-hunter

Find threats in your source code

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

DarkMass

Automated recon optimized for fast, efficient mass scanning

BlackMass

A recon tool optimized for mass scanning

Bugcrowd-tech

Scraped Bugcrowd programs for techstack

buildkite-agent

The Buildkite Agent is an open-source toolkit written in Go for securely running build jobs on any device or network

cloud-headers

This is a authoratative listing of all the HTTP headers used by the major cloud providers

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Valid8Proxy

Tool designed for fetching, validating, and storing working proxies.

APAC-Conferences

A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

Arjun

HTTP parameter discovery suite.

bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

code-puppets

Code Puppets are sock puppets that malicious actors use to attack the software supply chain

cyberanode

downundercons

fake-git-history

Generate Git commits.

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

mimikatz

MVSOSP

Minimum Viable Secure Open-Source Project

niftybank-app

test of the repo forking private change

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

sectalks.github.io

SecTalks socially authored website

sortable

Drop-in script to make tables sortable

tvpo

Value, Behaviour & Patterns (VBP) - A flexible threat modelling framework for the software supply chain

wg-securing-software-repos

OpenSSF Working Group on Securing Software Repositories

www-revent-appsec-pacific-northwest-security-conference

OWASP Foundation Web Respository