weev3 Goto Github PK

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

caldera

Automated Adversary Emulation

checklists

Pentesting checklists for various engagements

ci_secrets

A DevOps-friendly way of detecting newly leaked secrets.

cintruder

Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.

codeql-uboot

commonspeak

Content discovery wordlists generated using BigQuery

community

Kubernetes community content

compsecattacklabs

Contains Attack labs

ctf

ctf-tools

Some setup scripts for security research tools.

deathstar

Automate getting Domain Admin using Empire

deserlab

Java deserialization exploitation lab.

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

digispark-scripts

USB Rubber Ducky type scripts written for the DigiSpark.

domain_stats

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

exploits

Public exploits (re)writed while learning.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ffuf

Fast web fuzzer written in Go

freq

This is a repository for freq.py and freq_server.py

fuzzer

A Python interface to AFL, allowing for easy injection of testcases and other functionality.

fuzzgoat

A vulnerable C program for testing fuzzers.

fuzzingpaper

Recent Fuzzing Paper

go-for-oscp

graudit

grep rough audit - source code auditing tool

hackbar_javaversion

Hackbar Java Version

hacker-container

Container with all the list of useful tools/commands while hacking Kubernetes Clusters

helk

The Hunting ELK

hello-world-ruby-cb-gh-000