reality9 Goto Github PK

4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

aleph

An Open Source Malware Analysis Pipeline System

anomaly-detection

Real-time clickstream anomaly detection with Amazon Kinesis Analytics

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

assetfinder

Find domains and subdomains related to a given domain

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

attck_empire

Generate ATT&CK Navigator layer file from PowerShell Empire agent logs

awesome-appsec

A curated list of resources for learning about application security

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-nodejs-security

Awesome Node.js Security resources

awesome-red-teaming

List of Awesome Red Teaming Resources

b374k

PHP Webshell with handy features

bag-of-holding

An application to assist in the organization and prioritization of software security activities.

binnavi

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

bloodhound

Six Degrees of Domain Admin

brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

buildkit

burpkit

Next-gen BurpSuite penetration testing tool

burpsuitejsbeautifier

Burp Suite JS Beautifier

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

caldera

The CALDERA automated adversary emulation system

cgm-remote-monitor

community maintained fork of the original

cgpwn

A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks

changeme

A default credential scanner.

cheatsheets

Penetration Testing/Security Cheatsheets

checkmarx-python-sdk

Checkmarx Python SDK

cloudtrail-anomaly