netsec

api-platform-samples

Working samples for the Apigee API Platform

API-Security

OWASP API Security Project

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

co2

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

CrackMapExec

A swiss army knife for pentesting networks

Defensive-S3-Buckets

Defensive S3 Bucket Squating

docker-centos7-x64

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

graphql-apis

📜 A collective list of public GraphQL APIs

graphql-binding-openapi

GraphQL binding implementation for OpenAPI/Swagger endpoints

graphql-faker

🎲 Mock or extend your GraphQL API with faked data. No coding required.

graphql-voyager

🛰️ Represent any GraphQL API as an interactive graph

impacket

Impacket is a collection of Python classes for working with network protocols.

InSpy

A python based LinkedIn enumeration tool

j2ee-scan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

logger-plus-plus

Burp Suite Logger++: Log activities of all the tools in Burp Suite

manifesto

A public statement about ubiquitous encryption on the federated XMPP network.

mass-s3-bucket-tester

This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable

OpenAPI-Specification

The OpenAPI Specification Repository

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

redirection-othmane

ScrapedIn

A tool to scrape LinkedIn without API restrictions for data reconnaissance

security-champions-playbook

Security Champions Playbook v 1.1

sniff-paste

Pastebin OSINT Harvester

software-vulnerability-scanner

Vulnerability scanner based on vulners.com search API

Talks-and-Workshops

A collection of talks and workshops provided by OAI members

terraform-google-consul

A Terraform Module for how to run Consul on Google Cloud using Terraform and Packer

ThreatPlaybook

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

tutorials

Configuration tutorials for a variety of mail user agents.

vault

A tool for secrets management, encryption as a service, and privileged access management