m-i-r-a-c-l-e Goto Github PK

aws-s3-book

S3 runbook

az500

Exam AZ-500: Microsoft Azure Security Technologies Crash Course

cloud-aws-azure-

dvta

Damn Vulnerable Thick Client App developed in C# .NET

dvta-1

Damn Vulnerable Thick Client App

exploit-code-by-me

Exploit code developed/reproduced by me

frida-objection-faceid-and-touchid

Face ID is basically used to unlock and log in to apps, accounts and more. Is it secure?

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

git-secrets

Prevents you from committing secrets and credentials into git repositories

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

good-read

Repository for study material including ebooks, URLs, web pages etc

inspec

InSpec: Auditing and Testing Framework

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

jwtcrack

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mannu-shell

Mannu Shell is PHP web based shell. This code is meant for performing server side file manipulation and other stuffs. Its backdoor free and user friendly.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

s3scanner

Scan for open S3 buckets and dump

sh

b374k php web shell

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

vault

A tool for secrets management, encryption as a service, and privileged access management