coffee-90

bug-hunting-101

SecurityExplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

notes

Resources and articles I need to take a look at. Mostly about malware/exploit development and analysis.

Pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

malware-samples

Malware samples, analysis exercises and other interesting resources.

learngo

❤️ 1000+ Hand-Crafted Go Examples, Exercises, and Quizzes. 🚀 Learn Go by fixing 1000+ tiny programs.

LogMePwn

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

Log4J-Scanner

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

WELA

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

WMEye

WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

fuite

A tool for finding memory leaks in web apps

lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Bolt

CSRF Scanner

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

k8s-In-30Mins

Learn how to set up the Kubernetes cluster in 30 mins and deploy the application inside the cluster.

Packet-Sniffer

A Network Packet Sniffing tool developed in Python 3.

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

sigma

Main Sigma Rule Repository

CobaltStrike4.0

收集的CobaltStrike4.0

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

uro

declutters url lists for crawling/pentesting

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

SecGen

Create randomly insecure VMs

DVWA

Damn Vulnerable Web Application (DVWA)