cybernewbies Goto Github PK

the_cyber_plumbers_handbook

Free copy of The Cyber Plumber's Handbook

thick-client-pentest-checklist

A OWASP Based Checklist With 80+ Test Cases

thick-client-pentesting

threat-hunting-in-aws

threat-matrix-cicd

Threat matrix for CI/CD Pipeline

threat-model-cookbook

This project is about creating and publishing threat model examples.

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

threatintelscripts

threatmodel-for-aws-s3

ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach

tipstolearnaws

This is a work on progress free e-book

tj-jpt

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

tj-osint-notebook

This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations when it comes to performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more about OSINT and how to analyze the data that is out there on the internet.

top10webseclist

Top Ten Web Hacking Techniques List

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

tor-ip-addresses

Hourly checked and updated list of IP Addresses of Tor and Tor Exit Nodes

training-essential-aws-devsecops

Course designed to to provide participants with the essential skills in the field of DevSecOps.

tryhackme

Hacker Man 👨‍💻

tryhackme_room

tutorials

Cloud security tutorials and best practices

tutorials-1

Additional Resources For Securing The Stack Tutorials

tweetfeed

Collecting IOCs posted on Twitter

tyr

Android Recon & Research Tools

ultimate-guide-to-pwning

The Ultimate Guide to Pwning

uro

declutters url lists for crawling/pentesting

useful_websites_for_pentester

This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises.

virtualdynamicanalysis

A basic android pentest environment to instrument apps without root or repackaging an app

vulnerabilities-approach-slides

PDF slides

vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

vulnerable-oauth-2.0-applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.