ariesike

log4shell-poc

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

timeout

Timeout invocation. Go porting of GNU timeout and able to use as Go package

STEWS

A Security Tool for Enumerating WebSockets

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

crawlergo

A powerful browser crawler for web vulnerability scanners

amass

In-depth attack surface mapping and asset discovery

DongTai

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

itermocil

Create pre-defined window/pane layouts and run commands in iTerm

rescope

Bugbounty scope tool

Mind-Maps

Mind-Maps of Several Things

line-fido2-server

FIDO2(WebAuthn) server officially certified by FIDO Alliance and Relying Party examples.

readpe

The PE file analysis toolkit

Injector

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

gvm

Go Version Manager

geziyor

Geziyor, blazing fast web crawling & scraping framework for Go. Supports JS rendering.

cloud-security-remediation-guides

Security Remediation Guides

webhooks

:fishing_pole_and_fish: Webhook receiver for GitHub, Bitbucket, GitLab, Gogs

loguru

Python logging made (stupidly) simple

cosign

Code signing and transparency for containers and binaries

KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

android-malware

Collection of android malware samples

plantuml-server

PlantUML Online Server

flask-restx

Fork of Flask-RESTPlus: Fully featured framework for fast, easy and documented API development with Flask

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

dirsearch

Web path scanner

XSStrike

Most advanced XSS scanner.

tink

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless