jmhale

public-apis

A collective list of free APIs

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

homebrew-cask

🍻 A CLI workflow for the administration of macOS applications distributed as binaries

magic-wormhole

get things from one computer to another, safely

ScoutSuite

Multi-Cloud Security Auditing Tool

tinypilot

Use your Raspberry Pi as a browser-based KVM.

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

blackhat-python3

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries.

Security-Research

Exploits written by the Rhino Security Labs team

authy

Go library and program to access your Authy TOTP secrets.

iam-policy-json-to-terraform

Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document

terraform-cost-estimation

Anonymized, secure, and free Terraform cost estimation based on Terraform plan (0.12+) or Terraform state (any version)

terraform-null-label

Terraform Module to define a consistent naming convention by (namespace, stage, name, [attributes])

assume-role

DEPRECATED — assume-role: a CLI tool making it easy to assume IAM roles through an AWS Bastion account

threatcl

Documenting your Threat Models with HCL

peertransfer

:package: • Send a file p2p and e2e encrypted in your browser using WebRTC.

access-undenied-aws

Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-sourced by Ermetic.

tailflix

drop in replacement for tail -F that asks you if you are still watching

aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

Nosql-MongoDB-injection-username-password-enumeration

Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

cloudkey

No need for IAM users when we have Yubikeys

aws-accounts-terraform

policy-hub-cli

CLI for searching Rego policies

encryption

This repository explains one way you can encrypt files before transmitting them to Backblaze B2.

Violent-Python-Companion-Files

Violent Python scripts used in book and few other required files

streamdeck-tricks

Code to use streamdeck lib and tie in obs/mqtt/other things

Trapdoor

Serverless honeytoken 🕵🏻‍♂️

nvidia-snatcher

:robot: Autonomous robot for all your Nvidia needs

fragcenter

Stream display system to view active streams on an rtmp server.