clueby4 Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

apicheck

The DevSecOps toolset for REST APIs

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

azad

Pentesting azure ad

azucar

NextSecurity Modified - Security auditing tool for Azure environments

azure-cloudgazer

Azure cloudgazer: collect and scan your Azure resources

azure-sec-lab

A small pentesting lab for Azure

azurepentestbeginner

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

cloud-pentest

Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud

cloudpentestcheatsheets

devsecops_tools

Recopilación de herramientas complementarias para auditoría de Docker, K8, AWS, etc. Estas herramientas me han sido útiles en pentesting (tanto caja negra como blanca) y en la revisión de la seguridad de diferentes entornos y diferentes tecnologías.

digger

Identifies bucket/container misconfigurations. AWS S3, GCS, Azure storage. Useful when doing pentests/security reviews.

invoke-obfuscation

PowerShell Obfuscator

lava

Microsoft Azure Exploitation Framework

microburst

A collection of scripts for assessing Microsoft Azure security

microsoft-365-for-it-and-security

Microsoft 365 Stuff and scripts for IT and Security

nettacker

Automated Penetration Testing Framework

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powershell

Collection of useful PowerShell functions, scripts, snippets and templates

powershell-1

PowerShell functions and scripts (SCCM, SCSM, AD, Exchange, O365, ...)

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerzure

PowerShell framework to assess Azure security

python-honeypot

OWASP Honeypot, Automated Deception Framework.

samm

SAMM stands for Software Assurance Maturity Model.

scoutsuite

Multi-Cloud Security Auditing Tool

securetea-project

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)