user-nobody Goto Github PK

absinthe

A Blind SQL Exploitation application

actionlab

android_device_lge_hammerhead

Google Nexus 5

appmon

Documentation:

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

aptnotes

Various public documents, whitepapers and articles about APT campaigns

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

argo-ci-cd-

attack-tools

Utilities for MITRE™ ATT&CK

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

aws-extender

aws-extender-cli

AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.

b374k

PHP Webshell with handy features

bloodhound

Six Degrees of Domain Admin

bloodhound-owned

A collection of files for adding and leveraging custom properties in BloodHound.

bounty-targets-data

This repo contains hourly-updated data dumps of Hackerone/Bugcrowd scopes that are eligible for reports

browsergather

Fileless web browser information extraction

c2s

Command and Control server on Slack

caldera

An automated adversary emulation system

chaosmonkey

Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

cheatsheet-god

Penetration Testing / OSCP Biggest Reference Bank / Cheatsheet

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudsploit

Cloud Security Posture Management (CSPM)

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

darwin-xnu

The Darwin Kernel (mirror)

devsecops-gh-actions

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

docker-security

Getting a handle on container security