Eriner

gotosocial

Fast, fun, small ActivityPub server.

gokart

A static analysis tool for securing Go code

frida-interception-and-unpinning

Frida scripts to directly MitM all HTTPS traffic from a target mobile application

gokey

A simple vaultless password manager in Go

pentest-reports-static

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

APKLab

Android Reverse-Engineering Workbench for VS Code

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

rustlings

:crab: Small exercises to get you used to reading and writing Rust code!

domain-protect

OWASP Domain Protect - prevent subdomain takeover

keyring

Proper Payload Protection Prevents Poor Performance

plow

A high-performance HTTP benchmarking tool that includes a real-time web UI and terminal display

goLazagne

Go library for credentials recovery

netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

sunyata

utreexo blockchain skeleton

curlie

The power of curl, the ease of use of httpie.

modern-unix

A collection of modern/faster/saner alternatives to common unix commands.

go-grpc-middleware

Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.

purple-team-exercise-framework

Purple Team Exercise Framework

webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

h2csmuggler

cosign

Code signing and transparency for containers and binaries

awesome-database-learning

A list of learning materials to understand databases internals

awesome-etl

A curated list of awesome ETL frameworks, libraries, and software.

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

reasonably-secure-electron

A pattern for reasonably secure Electron applications

stats

A well tested and comprehensive Golang statistics library package with no dependencies.

go-attestation