bbeale

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

tabby

Self-hosted AI coding assistant

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

PentestGPT

A GPT-empowered penetration testing tool

OpenChat

LLMs custom-chatbots console ⚡

Loki

Loki - Simple IOC and YARA Scanner

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

quay

Build, Store, and Distribute your Applications and Containers

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

security-apis

A collective list of public APIs for use in security. Contributions welcome

pytm

A Pythonic framework for threat modeling

dcrd

Decred daemon in Go (golang).

Fenrir

Simple Bash IOC Scanner

SIEM

SIEM Tactics, Techiques, and Procedures

technical-writing-template

:unicorn: A sample template with guidelines for writing technical articles.

forge-poc-templates

ethora

A 'super app' engine for your project. React Native (iOS, Android) and React.js (Web, desktop). Social Sign In 🄵, Messaging 💬 (chat, voice, push notifications), Web3 Wallet 🪪 (profile QR, documents, coins, NFT), DLT 🔐 (provenance, crypto signing), Gamification 🤩, Social Commerce and more.

siembol

An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.

zipped-contracts

auditor-docker

RedTeamSIEM

Repository of resources for configuring a Red Team SIEM using Elastic

gpt-osint

telegramtrac

Browser interface to Telegram's API with additional modules for generating datasets and network graphs

iframe

An iframe component that allows to open dapps with any Ethereum address impersonated.

webcams

Store, find and follow public RTSP streams

Bellingcat-Hackathon-PyScanner

This project is a sample creation of port scanning functionality implementation using Python.

octo-web

Octosuite for the web

OSCP-Priv-Esc

Mind maps / flow charts to help with privilege escalation on the OSCP.