andresriancho

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

enumerate-iam

Enumerate the permissions associated with AWS credential set

nimbostratus

Tools for fingerprinting and exploiting Amazon cloud infrastructures

race-condition-exploit

Tool to help with the exploitation of web application race conditions

websocket-fuzzer

HTML5 WebSocket message fuzzer

mongo-objectid-predict

Predict Mongo ObjectIds

jwt-fuzzer

JWT fuzzer

cc-lambda

Search the common crawl using lambda functions

secure-ubuntu-desktop

Maintain a list of tips and tricks to be used by Ubuntu users to secure their laptops.

vpc-vpn-pivot

Pivot into private VPC networks using a VPN connection

django-moth

A Django vulnerable Web application for testing the w3af framework

aws-audit-automation

Tools to automate AWS Cloud security assessments

w3af-api-client

REST API client to consume w3af

aws-backup

AWS Backup implementation in terraform

pico-wavsep

A minimalistic way to run WAVSEP

burp-proxy-search

Burp suite HTTP history advanced search

dirty-dependency-check

Vulnerability dependency check for Maven projects

collector

Collect performance metrics for any software using AWS

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

burp-extensions

Collection of Burp extensions

cloudjack

Route53/CloudFront Vulnerability Assessment Utility

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

HTTPretty

HTTP client mocking tool for Python, it's like ruby's FakeWeb for python

high-entropy-json

Call Lyft's high-entropy-string for each string in a JSON document

panelseguridad

Introducción al mundo de la seguridad

pebble

Multi threading and processing eye-candy.

PMapper

A tool for quickly evaluating IAM permissions in AWS.

cloudtrail-partitioner

pywren

Teraflops and microservices

tosheets

Send your stdin to google sheets