ttffdd

ttffdd's starred repositories

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Language:JavaApache-2.08148 317 76

unredacter

Never ever ever use pixelation as a redaction technique

Language:TypeScriptGPL-3.07602 67 28

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Language:GoApache-2.05648 59 1021

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Language:GoBSD-3-Clause5331 62 107

cupp

Common User Passwords Profiler (CUPP)

Language:PythonGPL-3.04290 212 65

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

Language:GoApache-2.04206 64 1081

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Language:ShellMIT3884 88 418

conftest

Write tests against structured configuration data using the Open Policy Agent Rego query language

Language:GoNOASSERTION2815 27 321

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Language:GoMIT2586 53 100

gokart

A static analysis tool for securing Go code

Language:GoApache-2.02170 26 48

WEF

Wi-Fi Exploitation Framework

Language:ShellMIT2128 33 24

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Language:Open Policy AgentApache-2.01945 26 1931

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

Language:C++NOASSERTION1475 50 23

gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

Language:GoMIT1443 39 67

control-flag

A system to flag anomalous source code expressions by learning typical expressions from training data

Language:C++MIT1235 46 21

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

Language:JavaApache-2.01103 14 102