Gamunu Karunarathna's repositories
juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
HackTools
The all-in-one browser extension for offensive security professionals 🛠
trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
cloudsploit
Cloud Security Posture Management (CSPM)
trivy-operator
Kubernetes-native security toolkit
ghidra
Ghidra is a software reverse engineering (SRE) framework
PortSwigger-Lab-and-Burpsuite-Tutorial
It is a burpsuite introduction and these are 5 lab I performed in Burpsuite.
metasploit-framework
Metasploit Framework
HardwareAllTheThings
Hardware/IOT Pentesting Wiki
php-malware-finder
Detect potentially malicious PHP files
sliver
Cobalt Strike alternative
Havoc
The Havoc Framework(C2 framework)
free-for-dev
A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev
LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
DeTTECT
Detect Tactics, Techniques & Combat Threats
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
GraphQLmap
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
metasploitable3
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
leonidas
Automated Attack Simulation in the Cloud, complete with detection use cases.
cloud-wiki
A public cloud security knowledgebase - https://www.secwiki.cloud/
Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
XAttackProV30
XAttacker Tool PRO V30 Website Vulnerability Scanner & Auto Exploiter
CEH-in-bullet-points
💻 Certified ethical hacker summary in bullet points
awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
awesome-oscp
A curated list of awesome OSCP resources
Burp-Suite-Certified-Practitioner-Exam-Study
Burp Suite Certified Practitioner Exam Study