kekkegenkai

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

awesome-pentest-cheat-sheets

Collection of cheat sheets useful for pentesting

simulator

Kubernetes Security Training Platform - focusing on security mitigation

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

cvemap

Navigate the CVE jungle with ease.

exploit-notes

Sticky notes for pentesting, bug bounty, CTF.

zmap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

cve

Gather and update all available and newest CVEs with their PoC.

playwright

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

reaper

💀 Don't fear the Reaper 👻

wapalyzer

🌐 Identify the technologies powering any website. This is a fork of the now deleted Wappalyzer project by @AliasIO and community.

APKLab

Android Reverse-Engineering Workbench for VS Code

apk_api_key_extractor

Automatically extracts API Keys from APK files

malicious-dependencies

Demonstrates how a malicious dependency could negatively impact the build output.

Talks

My talks...

jdeserialize

Automatically exported from code.google.com/p/jdeserialize

webshell

This is a webshell open source project

deepsecrets

Secrets scanner that understands code

jarm

free-programming-books

:books: Freely available programming books

freeCodeCamp

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

guac

GUAC aggregates software security metadata into a high fidelity graph database.

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

CEH-Exam-Questions

Planning To Take Certified Ethical Hacker (CEH)? Here are github repo with 125 questions and answers to help you prep for the test