pentestgpt

A GPT-empowered penetration testing tool

personal-security-checklist

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2021

playbooks

Phantom Community Playbooks

pmat-labs

Labs for Practical Malware Analysis & Triage

policy-hub-cli

CLI for searching Rego policies

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

public-api-lists

A collective list of free APIs for use in software and web development 🚀

pyez-toys

Playing with Junos and the PyEZ tools

pyneng-answers-en

Answers to tasks from the book "Python for Network Engineers"

pyneng-examples-exercises-en

Examples and exercises from the book "Python for Network Engineers"

pystemon

Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon

pythonpentest

A repository for large scripts from my book.

pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

readme

My leadership readme/operating manual

reconky-automated_bash_script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

scriptinglibrary

scriptinglibrary

scripts-1

Scripts I use during pentest engagements.

secure-gcp-reference

Best practice example for secure and compliant Google Cloud Platform infrastructure

securecodebox

secureCodeBox (SCB) - continuous secure delivery out of the box

securecontrolsframework

Config files for my GitHub profile.

security-champions-playbook

Security Champions Playbook v 2.1

security-response-automation

Take automated actions against threats and vulnerabilities.

security-scripts

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

sevenseconds

THIS PROJECT IS NOT LONGER ACTIVELY MAINTAINED

siem-on-amazon-elasticsearch-service

simple-bash-scripts

A collection of simple Bash scripts

solitude

Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone.

steampipe

Use SQL to instantly query your cloud services (AWS, Azure, GCP and more). Open source CLI. No DB required.

tenablecontainersecurity