infosec

There are 280 repositories under infosec topic.

threat9 / routersploit
Exploitation Framework for Embedded Devices
python security infosec router-exploitation-framework routersploit-framework exploits embedded router routersploit scanner creds dictionary-attack bruteforce
Language:Python 11869
smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
attacksurface cti cybersecurity footprinting hacking information-gathering information-security infosec intelligence-gathering osint osint-framework osint-reconnaissance osint-tool pentesting python recon security-tools threat-intelligence threatintel
Language:Python 11723
ffuf / ffuf
Fast web fuzzer written in Go
fuzzer infosec pentesting web
Language:Go 11407
maurosoria / dirsearch
Web path scanner
fuzzer fuzzing python security dirsearch hacking pentesting penetration-testing bug-bounty appsec wordlist hacking-tool infosec brute scanner bugbounty enumeration pentest-tool red-teaming redteam
Language:Python 11237
digininja / DVWA
Damn Vulnerable Web Application (DVWA)
dvwa php sql-injection security training infosec hacking
Language:PHP 9309
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C 9159
infosecn1nja / Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
hacking infosec pentesting red-team
8500
samratashok / nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
powershell nishang security red-team penetration-testing infosec hacking redteam activedirectory
Language:PowerShell 8333
rengine
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
security-tools osint recon recon-engine reconnaissance scanner scanner-web rengine information-gathering bugbounty hacking scanning pentesting bug-bounty infosec penetration-testing
Language:Python 6722
traitor
liamg / traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
cve-2021-3560 cve-2022-0847 dirtypipe exploit gtfobins hackthebox infosec privesc privilege-escalation redteam-tools security-tools
Language:Go 6494
trickest / cve
Gather and update all available and newest CVEs with their PoC.
poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security infosec hacking pentesting penetration-testing red-team security-tools software-vulnerability
Language:HTML 6058
hetty
dstotijn / hetty
An HTTP toolkit for security research.
bugbounty http infosec mitm pentesting proxy
Language:Go 5923
0xInfection / Awesome-WAF
🔥 Web-application firewalls (WAFs) from security standpoint.
awesome awesome-list bypass-waf firewall infosec security waf waf-bypass waf-detection waf-fingerprints waf-test waf-testing web-application-firewall
Language:Python 5921
EdOverflow / bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
bugbounty infosec payloads security
5561
daffainfo / AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
bugbounty bugbountytips bypass payloads reconnaissance bug hacking security payload penetration-testing vulnerability infosec pentest
5417
rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security blueteam red-team windows osx forensics hacking-simulator privilege-escalation-exploits hacktoberfest hacktoberfest2021
Language:CSS 5356
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
blueteam bugbounty cheatsheet credentials-gathering cybersecurity default-password exploit infosec offensive-security pentest pentesting
Language:Python 5269
awesome-shodan-queries
jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
shodan infosec pentesting iot internet-of-things security awesome awesome-list hacking penetration-testing shodan-dorks dorks network-infrastructure security-tools security-scanner cloud
5052
1earn
ffffffff0x / 1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
blueteam collection ctf hacking ics-security infosec linux-learning markdown-article pentest pentest-tool poc post-penetration redteam security security-tools study writeup
Language:C++ 5036
onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
infosec pentest courses penetration-testing security-professionals lab awesome security
4966
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
awesome-list best-practices blue-team blueteam cis-benchmarks computer-security cyber-security cybersecurity infosec linux-hardening security security-hardening security-tools windows-hardening
4939
fr0gger / Awesome-GPT-Agents
A curated list of GPT agents for cybersecurity
agents cybersecurity infosec llm
4709
infobyte / faraday
Open Source Vulnerability Management Platform
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration cve appsec cybersecurity
Language:Python 4613
can-i-take-over-xyz
EdOverflow / can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
bugbounty infosec list security subdomain subdomain-takeovers
Language:Python 4445
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
aws-security study-guide study-plan appsec appsec-tutorials azure-security devsecops-university gcp-security pentesting application-security cybersecurity cybersecurity-education infosec security-testing study-planner api-security
4108
fabacab / awesome-cybersecurity-blueteam
:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
awesome-list blue-team computer-security cybersecurity defensive-security infosec security
4010
PaulSec / awesome-sec-talks
A collected list of awesome security talks
conferences hacking infosec security
3958
Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
cameras cctv hacking hacking-tool infosec netsec penetration-testing pentesting rtsp security security-tools
Language:Go 3884
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
exploits infosec pentesting scanner security security-audit vulnerability-assessment vulnerability-detection vulnerability-scanners
Language:Python 3498
GerbenJavado / LinkFinder
A python script that finds endpoints in JavaScript files
infosec endpoints
Language:Python 3451
KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
cryptography steganography compression functional-programming ramdajs hacking-tool security hacking javascript privacy security-tools stego cipher infosec hacking-tools data-exfiltration
Language:JavaScript 3170
skerkour / black-hat-rust
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
rust security pentest pentesting offensive-security red-team audit beacon c2 bug-bounty bug-hunting wasm shellcodes scanner phishing trojan virus hacking infosec security-tools
Language:Rust 3042
ignis-sec / Pwdb-Public
A collection of all the data i could extract from 1 billion leaked credentials from internet.
infosec password rockyou seclists
2982
KeyDecoder
MaximeBeasse / KeyDecoder
KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.
card duplicate-keys infosec keydecoder locksmith pentesters picture security-enthusiasts
Language:Dart 2976
arainho / awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
api-security api-sec awesome-list api-hacking api-pentest apisec security pentest fuzzing api-hacks api-hunting infosec api-hardening
2727
snoop
snooppr / snoop
Snoop — инструмент разведки на основе открытых данных (OSINT world)
osint termux username-search username-checker pentest web-scraping ctf scanner redteam blueteam infosec security nickname ip geo police parser scraping geocoder username
Language:Python 2682