m00tiny

Stuart Gray's repositories

oh-my-zsh

A delightful community-driven (with 1,200+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

Language:ShellMIT1 10

Arjun

HTTP parameter discovery suite.

Language:PythonAGPL-3.0010

awesome-shell

A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.

CC0-1.0020

Bashark

Bash post exploitation toolkit

Language:ShellMIT010

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

MIT000

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 130 other CMSs

Language:PythonGPL-3.0000

crass

Code Review Audit Script Scanner

Language:Shell010

django-DefectDojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

Language:HTMLBSD-3-Clause010

dorkbot

Command-line tool to scan Google search results for vulnerabilities

Language:PythonNOASSERTION000

DVWA

Damn Vulnerable Web Application (DVWA)

Language:PHPGPL-3.0020

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

Language:JavaLGPL-3.0020

glutton

All eating honeypot

Language:GoMIT000

JohnTheRipper

This is the official repo for the Jumbo version of John the Ripper. The "bleeding-jumbo" branch (default) is based on 1.8.0-Jumbo-1 (but we are literally several thousands of commits ahead of it).

Language:C010

linWinPwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

Language:ShellMIT000

NodeGoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Language:HTMLApache-2.0000

nsjail

A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)

Language:C++Apache-2.0000

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT000

Photon

Incredibly fast crawler designed for OSINT.

Language:PythonGPL-3.0010

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Language:PythonGPL-2.0010

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

Language:JavaScriptGPL-3.0000

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT020