ErwinGeirnaert

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

awesome-web-security

🐶 A curated list of Web Security materials and resources.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

pwncat

Fancy reverse and bind shell handler

Microsoft-Defender-for-Cloud

Welcome to the Microsoft Defender for Cloud community repository

changeme

A default credential scanner.

API-s-for-OSINT

List of API's for gathering information about phone numbers, addresses, domains etc

Auto_Wordlists

gmapsapiscanner

security-apis

A collective list of public APIs for use in security. Contributions welcome

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner Exam Study

semgrep-rules

Semgrep rules registry

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

kubernetes-security-checklist

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

Phishious

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.

GhostBuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

ffufplus

You can read the writeup on this script here

semgrep-rules

MSDT_CVE-2022-30190

This Repository Talks about the Follina MSDT from Defender Perspective

wallpapers

Collection of ProjectDiscovery wallpapers

saml-practice

Small environment for practicing SAML attacks

secDevLabs

A laboratory for learning secure web development in a practical manner.