Odd Christer Brovig's starred repositories

Security_Ninjas_AppSec_Training

OpenDNS application security training program

Language:GroffLicense:BSD-2-ClauseStargazers:223Issues:0Issues:0

CSPTBurpExtension

CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

Language:JavaLicense:Apache-2.0Stargazers:68Issues:0Issues:0

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

Stargazers:636Issues:0Issues:0

encrypted-dns

DNS over HTTPS config profiles for iOS & macOS

License:UnlicenseStargazers:3136Issues:0Issues:0
Language:KotlinStargazers:6Issues:0Issues:0

Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

Language:HTMLLicense:CC0-1.0Stargazers:3925Issues:0Issues:0

SOC-Interview-Questions

SOC Interview Questions

Stargazers:1009Issues:0Issues:0

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

License:CC-BY-4.0Stargazers:984Issues:0Issues:0

Linux-Incident-Response

practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response

Language:ShellStargazers:353Issues:0Issues:0

Awesome-Azure-Pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

License:GPL-3.0Stargazers:969Issues:0Issues:0

Security_Engineer_Interview_Questions

Every Security Engineer Interview Question From Glassdoor.com

Stargazers:1152Issues:0Issues:0

Security_Architect_and_Principal_Security_Engineer_Interview_Questions

This is a companion to the Security Engineer Questions

Stargazers:195Issues:0Issues:0

SUDO_KILLER

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

Language:ShellLicense:MITStargazers:2165Issues:0Issues:0

agent

SSH Session Monitoring Daemon

Language:CLicense:NOASSERTIONStargazers:451Issues:0Issues:0

ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Language:PythonLicense:MITStargazers:3269Issues:0Issues:0

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Language:GoLicense:MITStargazers:1316Issues:0Issues:0

bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

Language:CLicense:Apache-2.0Stargazers:20061Issues:0Issues:0

allstar

GitHub App to set and enforce security policies

Language:GoLicense:Apache-2.0Stargazers:1235Issues:0Issues:0

Awesome-CloudSec-Labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

Stargazers:1359Issues:0Issues:0

detection-engineering-pocket-guide

pocket guide for core detection engineering concepts

License:MITStargazers:26Issues:0Issues:0

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

License:CC0-1.0Stargazers:777Issues:0Issues:0

tbhm

The Bug Hunters Methodology

Stargazers:3841Issues:0Issues:0

terraform-vault-github-oidc

Terraform module to configure Vault for GitHub OIDC authentication from Action runners.

Language:HCLLicense:Apache-2.0Stargazers:24Issues:0Issues:0
Language:JavaScriptLicense:MITStargazers:59Issues:0Issues:0

macOS-enterprise-privileges

For Mac users in enterprise environments, this application gives users control over the administration of their machine by elevating their level of access to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or removing an application.

Language:Objective-CLicense:Apache-2.0Stargazers:1295Issues:0Issues:0

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Language:GoLicense:MITStargazers:2660Issues:0Issues:0

awesome-risk-quantification

A collection of awesome projects, blog posts, books, and talks on quantifying risk

Stargazers:439Issues:0Issues:0

how-to-secure-anything

How to systematically secure anything: a repository about security engineering

Stargazers:9907Issues:0Issues:0

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

Language:DockerfileLicense:CC0-1.0Stargazers:1332Issues:0Issues:0

www-project-threat-modeling-playbook

OWASP Foundation Web Respository

Language:HTMLStargazers:7Issues:0Issues:0