alextudu Goto Github PK
Name: LinuxBunny
Type: User
Company: Health Alliance NZ
Bio: Cyber Security Enthusiast
Location: New Zealand
Name: LinuxBunny
Type: User
Company: Health Alliance NZ
Bio: Cyber Security Enthusiast
Location: New Zealand
This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
Find domains and subdomains related to a given domain
OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, itβs a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
A Burp plugin to export findings to DefectDojo
My cheatsheets
For testing CI CD pipeline
Code Pulse is a real-time code coverage tool for penetration testing activities
Yet another subdomain finder
Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
Getting a handle on container security
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
The fastest and cross-platform subdomain enumerator, don't waste your time.
Go programming language secure coding practices guide
Take a list of domains and probe for working HTTP and HTTPS servers
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
DIrectory bruteforcing tool
Fetch many paths for many hosts - without killing the hosts
Metasploit Framework
OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
Swag for the OWASP projects and chapters
The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
An open source script to perform malware static analysis on Portable Executable
This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. πππ
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google β€οΈ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.