AmandaBSobrinho

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

TCM-Security-Sample-Pentest-Report

Sample pentest report provided by TCM Security

wrongsecrets

Vulnerable app with examples showing how to not use secrets

unredacter

Never ever ever use pixelation as a redaction technique

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

PII-Identifier

Burp Extension to identify PII data

awesome-vulnerable

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

TryHackMe-CTF-Writeups

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Nuclei-Templates-Collection

Nuclei Templates Collection

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

Dnsrr

DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS.

ios-utils

Various scripts for iOS app analysis

SharpPhish

Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.

pcap-burp

Pcap importer for Burp

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

osint-brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

XSS-Payloads

List of XSS Vectors/Payloads

ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

peek

Simple animated GIF screen recorder with an easy to use interface

sentinel

GUI Burp Plugin to ease discovering of security holes in web applications

Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

pentest-tools

A collection of custom security tools for quick needs.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.