mendickxiao

vulnerability-assessment-tool

Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://sap.github.io/vulnerability-assessment-tool/

1book

《Web安全之机器学习入门》

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Alpine

An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies

analytics-zoo

Distributed Tensorflow, Keras and BigDL on Apache Spark

anchore-engine

A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

API-Security

OWASP API Security Project

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

BigDL

BigDL: Distributed Deep Learning Library for Apache Spark

caldera

An automated adversary emulation system

cfn_nag

Linting tool for CloudFormation templates

chameleon

🦎 一套代码运行多端，一端所见即多端所见

corretto-8

Amazon Corretto 8 is a no-cost, multi-platform, production-ready distribution of OpenJDK8

CyBot

Open Source Threat Intelligence Chat Bot

dependency-track

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

ffuf

Fast web fuzzer written in Go

firecracker

Secure and fast microVMs for serverless computing.

generateHostipsbyhost

Generate the host and ip list by the hostname list

ghidra

Ghidra is a software reverse engineering (SRE) framework

kubeflow

Machine Learning Toolkit for Kubernetes

lambhack

A very vulnerable serverless application in AWS Lambda

metta

An information security preparedness tool to do adversarial simulation.

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

recon-pipeline

An automated target reconnaissance pipeline.

redcanary-response-utils

Tools to automate and/or expedite response.

Rock-ON

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

RTA

sqlmap

Automatic SQL injection and database takeover tool

vault

A tool for secrets management, encryption as a service, and privileged access management

WebGoat

WebGoat is a deliberately insecure application