ckduy's repositories
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
cyberprobe
Capturing, analysing and responding to cyber attacks
Auto-GPT
An experimental open-source attempt to make GPT-4 fully autonomous.
Awesome-Fuzzing
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
awesome-pcaptools
A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
CloudFlair
🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.
graylog2-server
Free and open source log management
HatCloud
Bypass CloudFlare with Ruby
Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
jumpserver
JumpServer 是广受欢迎的开源堡垒机，是符合 4A 规范的专业运维安全审计系统。
learn-anything
🗺 Search Interactive Maps to Learn Anything
linux-exploit-suggester
Linux privilege escalation auditing tool
linux-kernel-exploits
linux-kernel-exploits Linux平台提权漏洞集合
Mobile-Security-Framework-MobSF
Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
ngx_ip_blacklist_admin
nginx manage ip blacklist
OSCP-Survival-Guide
Kali Linux Offensive Security Certified Professional Survival Exam Guide
OWASP-Web-Checklist
OWASP Web Application Security Testing Checklist
pentest-wiki
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
public-pentesting-reports
Curated list of public penetration testing reports released by several consulting firms
scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
secure-code-review-checklist
A starter secure code review checklist
SELKS
A Suricata based IDS/IPS/NSM distro
shellen
Interactive shellcoding environment to easily craft shellcodes
Th3inspector
Th3Inspector 🕵️ best tool for Information Gathering 🔎
Vanquish
Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
Windows-Exploit-Suggester
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
windows-kernel-exploits
windows-kernel-exploits Windows平台提权漏洞集合
Windows-Privilege-Escalation
Windows Privilege Escalation Techniques and Scripts