Beast code in Giters

grauwolf32's starred repositories

radare2

UNIX-like reverse engineering framework and command-line toolset

Language:CLGPL-3.02049100

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

MIT2240100

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

Language:C++NOASSERTION2179100

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Language:PythonCC-BY-SA-4.02776900

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Language:PythonMIT3630200

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT6047900

android-coq-model

Coq model of Android permission system

Language:Coq200

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Language:PythonGPL-3.0532500

honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Language:CApache-2.0305500

weird_proxies

Reverse proxies cheatsheet

Language:Python177300

param-miner-doc

Unofficial documentation for the great tool Param Miner

Apache-2.016900

git-hound

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

Language:GoMIT119000

HackBar

HackBar plugin for Burpsuite

Language:JavaMIT152600

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

Language:PythonGPL-3.0555200

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Language:GoApache-2.0480400

ProVerif-ATP

ProVerif-ATP - Combining ProVerif and Automated Theorem Provers for Security Protocol Verification

Language:OCaml2400

meg

Fetch many paths for many hosts - without killing the hosts

Language:GoMIT158900

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Language:JavaScriptGPL-3.01720000

cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Discord: https://discord.gg/DP657ACYEZ

Language:JavaScriptApache-2.056200

untrusted-types

Language:SvelteApache-2.065100

cheat

cheat allows you to create and view interactive cheatsheets on the command-line. It was designed to help remind *nix system administrators of options for commands that they use frequently, but not frequently enough to remember.

Language:GoMIT1232500

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

209600

ApplicationInspector

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Language:C#MIT423000

grauwolf32