Lithium876

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

go-interview

Collection of Technical Interview Questions solved with Go

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Casper

The default theme for Ghost

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

OWASP-Testing-Checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

nuclei-burp-plugin

Nuclei plugin for BurpSuite

hash_extender

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

LDAPmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

PadBuster

Automated script for performing Padding Oracle attacks

InjuredAndroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

purple-team-exercise-framework

Purple Team Exercise Framework

External-Pentest-Checklist

dirbuster-ng

dirbuster-ng is C CLI implementation of the Java dirbuster tool

lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

qiskit-metal

Quantum Hardware Design. Open-source project for engineers and scientists to design superconducting quantum devices with ease.

DeHashed-API-Tool

A command-line tool to query the DeHashed API. Easily search for various parameters like usernames, emails, hashed passwords, IP addresses, and more.

s3recon

Amazon S3 bucket finder and crawler.

Nuclei-BurpExtension

Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.

jwtear

Modular command-line tool to parse, create and manipulate JWT tokens for hackers

msdnsscan

MayorSec DNS Enumeration Tool

tools

A collection of simple tools and poc-builders

0e.vc

a shared short domain for XSS and other hacks

zymoTransmit

Python script to facilitate uploading COVID-19 test results to departments of health

pikvm-mouse-wiggle

Wiggle your mouse via PiKVM to keep your system alive