Repositories list

• SecLists

  Public
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  PHP

  •

  MIT License

  •24k•0•0•0•Updated Apr 24, 2023Apr 24, 2023

• nuclei

  Public
  Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

  Go

  •

  MIT License

  •2.6k•0•0•5•Updated Feb 20, 2023Feb 20, 2023

• linkedin-oauth2

  Public
  test python for linkedin oauth

  Python

  •0•0•0•2•Updated Feb 16, 2023Feb 16, 2023

• secrets-patterns-db

  Public
  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •134•0•0•0•Updated Feb 9, 2023Feb 9, 2023

• jwt_tool1

  Public
  🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

  Python

  •

  GNU General Public License v3.0

  •683•0•0•0•Updated Feb 6, 2023Feb 6, 2023

• naabu

  Public
  A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

  Go

  •

  MIT License

  •565•0•0•6•Updated Jan 23, 2023Jan 23, 2023

• vulnerable-code-snippets

  Public
  Twitter vulnerable snippets

  PHP

  •152•0•0•0•Updated Nov 18, 2022Nov 18, 2022

• www-project-kubernetes-top-ten

  Public
  OWASP Foundation Web Respository

  HTML

  •87•0•0•0•Updated Sep 1, 2022Sep 1, 2022

• SpringShell

  Public
  Spring4Shell - Spring Core RCE - CVE-2022-22965

  Python

  •85•0•0•0•Updated Apr 1, 2022Apr 1, 2022

• Spring4Shell-POC

  Public
  Python

  •237•0•0•0•Updated Mar 31, 2022Mar 31, 2022

• clean

  Public
  Get rid of unnecessary files to free up space on macOS

  Shell

  •

  MIT License

  •1•0•0•0•Updated Mar 8, 2022Mar 8, 2022

• beef

  Public
  The Browser Exploitation Framework Project

  JavaScript

  •2.2k•0•0•0•Updated Feb 28, 2022Feb 28, 2022

• theZoo

  Public
  A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

  Python

  •

  Other

  •2.5k•1•0•0•Updated Feb 16, 2022Feb 16, 2022

• 0days-in-the-wild

  Public
  Repository for information about 0-days exploited in-the-wild.

  HTML

  •

  Apache License 2.0

  •76•0•0•0•Updated Jan 10, 2022Jan 10, 2022

• h4cker

  Public
  This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

  Jupyter Notebook

  •

  MIT License

  •3.5k•0•0•0•Updated Jan 5, 2022Jan 5, 2022

• awesome-threat-intel-rss

  Public
  A curated list of Awesome Threat Intelligence blogs

  Apache License 2.0

  •40•0•0•0•Updated Dec 23, 2021Dec 23, 2021

• log4j-shell-poc

  Public
  A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

  Python

  •530•0•0•0•Updated Dec 21, 2021Dec 21, 2021

• SecureSoftwareSupplyChain

  Public
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.

  Apache License 2.0

  •17•0•0•0•Updated Dec 9, 2021Dec 9, 2021

• picoCTF

  Public
  The platform used to run picoCTF 2019.

  Python

  •

  MIT License

  •90•0•0•0•Updated Nov 29, 2021Nov 29, 2021

• dockprom

  Public
  Docker hosts and containers monitoring with Prometheus, Grafana, cAdvisor, NodeExporter and AlertManager

  MIT License

  •1.7k•0•0•0•Updated Nov 11, 2021Nov 11, 2021

• awesome-prometheus-alerts

  Public
  🚨 Collection of Prometheus alerting rules

  HTML

  •

  Other

  •1k•0•0•0•Updated Oct 27, 2021Oct 27, 2021

• ots

  Public
  One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

  Go

  •

  Apache License 2.0

  •71•0•0•0•Updated Oct 24, 2021Oct 24, 2021

• kubectl-curl

  Public
  Kubectl plugin to run curl commands against kubernetes pods

  Go

  •

  MIT License

  •16•0•0•0•Updated Sep 28, 2021Sep 28, 2021

• masscan

  Public
  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

  C

  •

  Other

  •3.1k•0•0•0•Updated Sep 15, 2021Sep 15, 2021

• hacking-kubernetes

  Public
  8•42•0•0•Updated Sep 1, 2021Sep 1, 2021

• rest-api-tutorial

  Public
  This is a sample source code for the article published on Toptal: https://www.toptal.com/nodejs/secure-rest-api-in-nodejs

  JavaScript

  •300•0•0•0•Updated Aug 27, 2021Aug 27, 2021

• nodejs-jwt-authentication-sample

  Public
  A NodeJS API that supports username and password authentication with JWTs

  JavaScript

  •

  MIT License

  •268•0•0•0•Updated Aug 23, 2021Aug 23, 2021

• nuclei-templates

  Public
  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  Python

  •

  MIT License

  •2.7k•0•0•0•Updated Aug 20, 2021Aug 20, 2021

• PayloadsAllTheThings

  Public
  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Python

  •

  MIT License

  •15k•0•0•0•Updated Aug 18, 2021Aug 18, 2021

• cloudgoat

  Public
  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

  HCL

  •

  BSD 3-Clause "New" or "Revised" License

  •638•0•0•0•Updated Aug 17, 2021Aug 17, 2021