chatlotus Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-cobaltstrike-defence

Defences against Cobalt Strike

awesome-cv

:page_facing_up: Awesome CV is LaTeX template for your outstanding job application

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

bro-cheatsheets

Bro Log Cheatsheets

cheatsheets-1

Penetration Testing/Security Cheatsheets

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

cve-2021-40444

CVE-2021-40444 PoC

damn-vulnerable-redis-container

An example of obtaining RCE via Redis and CSRF

dnscat2

fuzz.txt

Potentially dangerous files

github-search

A collection of tools to perform searches on GitHub.

gitlab-exiftool-rce

RCE Exploit for Gitlab < 13.10.3

incident-response-plan

Boilerplate Incident Response Plan from "Starting Up Security"

introlabs

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

nahamsec.training

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

o365enum

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

pdf-zip-nes-polyglot

PDF/ZIP/NES polyglot file generator (PoC||GTFO 0x14-style)

pmat-labs

Labs for Practical Malware Analysis & Triage

pwf

Practical Windows Forensics Training

sec588-day4

Day4 Lab

security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.