oscerd

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

trufflehog

Find and verify secrets

gobuster

Directory/File, DNS and VHost busting tool written in Go

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

langchain4j

Java version of LangChain

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

hackerone-reports

Top disclosed reports from HackerOne

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs

kafka-in-production

:books: Tech blogs & talks by companies that run Kafka in production

certificate-ripper

🔐 A CLI tool to extract server certificates

aws2tf

aws2tf - automates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.

CloudRecon

pantagrule

large hashcat rulesets generated from real-world compromised passwords

websec-answers

Websec interview questions by tib3rius answered

cyclonedx-maven-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

top4grep

find relevant security papers published in the top-4 conferences (S&P, USENIX, CCS, NDSS)

Terrapin-Artifacts

This repository contains the artifacts for the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

CTF-Repos

Material from CTF machines I have attempted

echoserver

A test image for http1.1, http2, GRP, TCP, UDP protocols.

potential-cassandra

CVE discovery

camel-http-ssl