alexmenguy Goto Github PK

gosdl

goSDL

grc

An open source Governance Risk Compliance (GRC) solution for corporates and government

gu-who

answering: who are all these users in my GitHub org?

hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

honeylambda

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

honeypi

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

lunar

A UNIX security auditing tool based on several security frameworks

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

macos-security-and-privacy-guide

Guide to securing and improving privacy on macOS

mfa-monitor

Backendless security monitoring for your MFA enabled services. 🔐

microctfs

Small CTF challenges running on Docker

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nmap-vulners

NSE script based on Vulners.com API

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

nodejsscan

NodeJsScan is a static security code scanner for Node.js applications.

nsp

node security platform command-line tool

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

opencanary

Modular and decentralised honeypot

openvpn-otp

OpenVPN OTP token support plugin

ortbot

Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book

oscp-archives

An archive of everything related to OSCP

oscp-treasure-cave

Collection of OSCP study material && tools.

owasp-risk-assessment-calculator

This Risk Rating Calculator is based on OWASP's Risk Rating Methodology

page-finder

python3 script that searches a network range for hosts hosting interesting pages that an attacker can leverage. Author: Cedric Owens

patrowldocs

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pmapper

A tool for quickly evaluating IAM permissions in AWS.