drwetter

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

android-security-awesome

A collection of android security related resources

monkey

Infection Monkey - An open-source adversary emulation platform

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

c-jwt-cracker

JWT brute force cracker written in C

coreruleset

OWASP CRS (Official Repository)

graudit

grep rough audit - source code auditing tool

openvas-docker

A Docker container for Openvas

Applied-Crypto-Hardening

Best Current Practices regarding secure online communication and configuration of services using cryptography.

debian-cis

PCI-DSS compliant Debian 10/11/12 hardening

tls-observatory

An observatory for TLS configurations, X509 certificates, and more.

docker-onion-nmap

Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

LinuxFlaw

This repo records all the vulnerabilities of linux software I have reproduced in my local workspace

nimue

Nimue is a simple Python script for jailbreaking Sony Bravia TVs.

training-kubernetes-security

striptls

proxy poc implementation of STARTTLS stripping attacks

smtpsmug

alpine-containertools

docker image with useful network and container tools and SSH

terraform-burp-collaborator

Terraform configuration to build a Burp Private Collaborator Server

german-owasp-day

German OWASP Day conference site & presentation archive

secpw

Secure random passwords in Javascript

msc_retest

A minimalistic tool to help measuring the runtime of regular expressions

automate_tomcat

Shellscript to automate installation, update checks and updates of Tomcat