brianlamCC

api-development-tools

:books: A collection of useful resources for building RESTful HTTP+JSON APIs.

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

aws-apigateway-swagger-exporter

Tool for exporting API specification from existing AWS API Gateway APIs in a Swagger fromat

AWS-Certified-Security-Specialty

AWS Certified Security Specialty (2019) course notes

aws-incident-response

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

caponeme

Repository demonstrating the Capital One breach on your AWS account

CVE-2019-8451

Jira未授权SSRF漏洞

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

globbing

Introduction to "globbing" or glob matching, a programming concept that allows "filepath expansion" and matching using wildcards.

jsfuzz

coverage guided fuzz testing for javascript

lambda-api

Lightweight web framework for your serverless applications

nmap-vulners

NSE script based on Vulners.com API

nodejssecurity

Documentation for Essential Node.js Security

nodexp

NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

OSCP-Cheat-Sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

OSCP-Exam-Report-Template-Markdown

:orange_book: OSCP Exam Report Template in Markdown

OWASP-Web-Checklist

OWASP Web Application Security Testing Checklist

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Security-Talk-Summaries

Summary of Security Talks

tfsec

:lock::earth_africa: Static analysis powered security scanner for your terraform code

You-Dont-Know-JS

A book series on JavaScript. @YDKJS on twitter.