mas0nd

gato

GitHub Actions Pipeline Enumeration and Attack Tool

noseyparker

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

gokart

A static analysis tool for securing Go code

nightmare

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

talks

Slides from our technical talks

security

Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.