security-testing

There are 41 repositories under security-testing topic.

caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 5213
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
aws-security study-guide study-plan appsec appsec-tutorials azure-security devsecops-university gcp-security pentesting application-security cybersecurity cybersecurity-education infosec security-testing study-planner api-security
4126
payloadbox / command-injection-payload-list
🎯 Command Injection Payload List
command-injection injection security-vulnerability vulnerability payload-list payload os-injection command os unix linux windows macos application application-security bugbounty security security-research vulnerability-research security-testing
2672
opensec-cn / kunpeng
kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。
proof-of-concept poc-library security-vulnerability security-testing
Language:Go 1647
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
owasp api-security security bugbounty security-tools waf web-application-security web-application-firewall security-testing graphql-security grpc-security rest-security
Language:Go 1419
Viralmaniar / Passhunt
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
password default-credentials default-password security pentest-tool penetration-testing security-testing cybersecurity
Language:Python 1166
guardrailsio / awesome-python-security
Awesome Python Security resources 🕶🐍🔐
awesome awesome-list python security security-testing security-tools static-analysis
896
habu
fportantier / habu
Hacking Toolkit
network-analysis networking scapy python3 security-tools hacking penetration-testing pentesting pentest pentest-tool pentesting-networks security-audit security-testing windows linux
Language:Python 858
akto-api-security / akto
Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
api-security api-discovery api-security-testing api-testing authentication authorization devsecops idor owasp-top-10 security security-testing sensitive-data-exposure threat-detection hacktoberfest hacktoberfest2023 devsecops-pipeline
Language:Java 839
bl4de / security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
pentesting hacking python bugbounty itsecurity ctf ctf-tools infosec webappsec scanner security-tools security-testing bug-bounty bug-bounties static-analysis
Language:Python 764
secureCodeBox
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
devsecops hacktoberfest kubernetes kubernetes-operator owasp owasp-zap securecodebox security security-automation security-testing security-tools
Language:JavaScript 726
CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
python can-bus security-scanner security-testing fuzzing xcp ecu
Language:Python 676
Anof-cyber / Application-Security
Resources for Application Security including Web, API, Android, iOS and Thick Client
android application-security appsec bugbounty cybersecurity hacking infosec penetration-testing penetration-testing-notes pentesting security security-testing
634
B3nac / InjuredAndroid
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
android android-studio security-testing android-security webview bug-bounty pentesting flutter flutter-security flutter-xss ctf apk vulnerabilities kotlin kotlin-android
Language:Kotlin 633
Marshall-Hallenbeck / red_team_attack_lab
Red Team Attack Lab for TTP testing & research
pentesting redteam vagrant ansible penetration-testing hacking red-team security lab security-tools infosec security-testing
Language:PowerShell 529
shodansploit / shodansploit
🔎 shodansploit > v1.3.0
shodan shodan-api shodan-cli shodan-scripts shodan-tool shodan-tools shodan-client shodan-python python-shodan security security-tools security-testing intelligence python-script shodansploit security-research security-scanner security-automation
Language:Python 515
guardrailsio / awesome-dotnet-security
Awesome .NET Security Resources
awesome awesome-list dotnet dotnet-core dotnet-framework security security-testing security-tools static-analysis
498
pyhackertarget / hackertarget
🎯 HackerTarget ToolKit - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery 🎯
hackertarget security security-tools security-testing zone-transfers traceroute ping ping-test reverse-dns reverse-dns-lookups whois-lookup reverse-ip-lookup subnet-lookup http-header-check extract-links extract-pages dns ip-location-lookup security-tool
Language:Python 470
enkomio / Taipan
Web application vulnerability scanner
security-tools security-scanner security-automation web-security application-security security security-audit security-testing hacking-tool taipan hacking web web-application web-sec-scanner web-security-research
454
rust-fuzz / honggfuzz-rs
Fuzz your Rust code with Google-developed Honggfuzz !
fuzz fuzzer honggfuzz rust fuzzing fuzz-testing security security-tools security-testing crates rust-fuzz sanitizer
Language:Rust 441
nerve
PaytmLabs / nerve
NERVE Continuous Vulnerability Scanner
security security-tools security-testing vulnerability-scanners vulnerability-assessment vulnerability-detection
Language:Python 437
flipkart-incubator / watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
security-tools security security-vulnerability security-testing vulnerability-management vulnerability-assessment pentest-tool penetration-testing-framework cve-databases cve-search application-security network-security product-security bugbounty
Language:Python 407
security-cheatsheet / metasploit-cheat-sheet
Metasploit Cheat Sheet 💣
metasploit metasploit-framework metasploit-cheat-sheet security security-cheat-sheets exploit metasploit-framework-database metasploit-database exploitation-framework security-research security-testing rapid7 meterpreter msfvenom payload
372
akenofu / OSCP-Cheat-Sheet
This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder
cybersecurity oscp oscp-guide oscp-journey oscp-prep oscp-tools oscp5 pentest pentesting readteaming security security-testing
358
aktsk / apk-medit
memory search and patch tool on debuggable apk without root & ndk
android android-security security-testing mobile-security-testing mobile-app-security security-tools blackhat arsenal
Language:Go 348
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 335
krabelize / icmpdoor
ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)
scapy icmp-tunnel reverse-shell icmp-reverse hacking-tool security-testing firewall-bypass
Language:Python 304
embark
e-m-b-a / embark
EMBArk - The firmware security scanning environment
linux iot security firmware hacking embedded-systems penetration-testing embedded-linux security-tools pentesting vulnerability-scanners security-automation firmware-tools firmware-analysis scanner data-analysis django security-scanner security-testing ubuntu-server
Language:Python 296
guardrailsio / awesome-java-security
Awesome Java Security Resources 🕶☕🔐
awesome awesome-list java security security-testing security-tools static-analysis
293
security-checklist / php-security-check-list
PHP Security Check List [ EN ] 🌋 ☣️
php php-library php-framework security security-audit checklist security-checklist php-security php-security-checker webapplication web-application-security bugbounty security-research security-researcher web-application web-application-framework security-testing
292
jjf012 / gopoc
用cel-go重现了长亭xray的poc检测功能的轮子
vulnerability-scanner poc proof-of-concept security-testing
Language:Go 288
redcanaryco / chain-reactor
Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
adversary-simulation elf linux mitre mitre-attack security security-testing
Language:C 285
mercedes-benz / sechub
SecHub provides a central API to test software with different security tools.
security orchestration api client server secdevops security-tools vulnerability-scanners security-scanner dast sast appsec continuous-integration rest build k8s sechub sdlc security-automation security-testing
Language:Java 248
MacOS-DuckyScripts
narstybits / MacOS-DuckyScripts
Presenting a wide range of more than 100 powerful BadUSB scripts exclusively designed for Mac OS & the Flipper Zero device. As the sole curator and maintainer of this repository. Your utilization of these scripts is highly valued, and I sincerely appreciate your support and enthusiasm!
badusb badusb-payloads bash-script ducky-payloads duckyscript flipper flipper-zero flipperzero pentesting security-testing
242
tprynn / web-methodology
Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
web security web-application web-application-security application-security appsec security-testing documentation
200
trailofbits / siderophile
Find the ideal fuzz targets in a Rust codebase
rust fuzzing program-analysis security-testing
Language:Rust 194

security-testing

mitre / caldera

jassics / security-study-plan

payloadbox / command-injection-payload-list

opensec-cn / kunpeng

wallarm / gotestwaf

Viralmaniar / Passhunt

guardrailsio / awesome-python-security

fportantier / habu

akto-api-security / akto

bl4de / security-tools

secureCodeBox / secureCodeBox

CaringCaribou / caringcaribou

Anof-cyber / Application-Security

B3nac / InjuredAndroid

Marshall-Hallenbeck / red_team_attack_lab

shodansploit / shodansploit

guardrailsio / awesome-dotnet-security

pyhackertarget / hackertarget

enkomio / Taipan

rust-fuzz / honggfuzz-rs

PaytmLabs / nerve

flipkart-incubator / watchdog

security-cheatsheet / metasploit-cheat-sheet

akenofu / OSCP-Cheat-Sheet

aktsk / apk-medit

vectra-ai-research / MAAD-AF

krabelize / icmpdoor

e-m-b-a / embark

guardrailsio / awesome-java-security

security-checklist / php-security-check-list

jjf012 / gopoc

redcanaryco / chain-reactor

mercedes-benz / sechub

narstybits / MacOS-DuckyScripts

tprynn / web-methodology

trailofbits / siderophile