darth-web

OSCP

Fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

actual

A local-first personal finance app

PortSwigger-Academy-CheatSheets

This repository contains cheatsheets and payloads compiled from completing the labs at PortSwigger Academy.

gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Methodology

KubeLight

OWASP Kubernetes security and compliance tool [WIP]

OSCP-Exercise-Checklist

A checklist to help students track their OSCP exercise progress.

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

S3Scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

subfinder

Fast passive subdomain enumeration tool.

amass

In-depth attack surface mapping and asset discovery

CloudPeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

OSCP-Tricks-2023

OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Android-Pentesting

Android Pentesting Zone

30-API-security-tests

🚀 Join us for 30days of daily API security tests. #30days30tests We've spent last 120days building amazing API security tests for the community. Next 30 days we will post test tutorials here.

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

AzureADAssessment

Tooling for assessing an Azure AD tenant state and configuration

OSCP-Cheatsheet

OSCP Cheatsheet by Sai Sathvik

bindiff

Quickly find differences and similarities in disassembled code

kali-setup-script

Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

ctf-tools

Collection of tools we developed and/or found useful for CTF events.

Red-Team-Management

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

tfsec

Tfsec is now part of Trivy