sshyran

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

hyperswitch

An open source payments switch written in Rust to make payments fast, reliable and affordable

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

HoneyCredIPTracker

Quick script to gather stats on incoming credentials and IPs for a honey listener.

nginx

My Nginx configuration files, for all to use and improve upon.

Caparser

A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.

SecurityTools

A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.

iptables

An iptables firewall configuration template.

DNSHarvester

This tool will harvest valid DNS subdomains from a given domain.

CTFSolutionTypes

A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!

TechStack

This project exists as a free (and transparent) alternative to paid services that show you what technologies are running on a given website.

ATM

The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.

athi

ATHI — An AI Threat Modeling Framework for Policymakers

GeoHarvest

A simple script for translating IP addresses to GeoLocations

geoip

A Ruby script that takes in IPs and returns Country, State, and City

mobiletools

Free tools for mobile testing.

ServerConfig

My various configuration files for zsh, vim, tmux, etc.

unsupervised-learning

mst

A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.

NewBox

Zsh and Vim on new Linux boxen.

augmented-course

The website for the AUGMENTED AI course.

gscour

Find all hostnames related to a given domain. Helpful during VA/PT work.

import-alignment

A library-based attempt to increase our chances for achieving AI Alignment with an emergent AGI.

solarized

precision color scheme for multiple applications (terminal, vim, etc.) with both dark/light modes

MostPoweredBy

Checks to see the most common X-Powered-By headers for the world's most popular websites.

SimpleDNSResolver

A very basic DNS Resolver. Could be useful in other projects.

vimblog.vim

Blogging from Vim

frappe

Low code web framework for real world applications, in Python and Javascript

hyperswitch

An open source payments switch written in Rust to make payments fast, reliable and affordable