open-sec Goto Github PK

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

acunetix_0day

Acunetix 0day RCE

adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

aix-for-penetration-testers

A basic AIX enumeration guide for penetration testers/red teamers

androidlabs

Android security labs

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

argon

at-ps

Adversary Tactics - PowerShell Training

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

autordpwn

The Shadow Attack Framework

aws_pwn

A collection of AWS penetration testing junk

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

bad-pdf

Steal NTLM Hashes with Bad-PDF

bdd-security

BDD Automated Security Tests for Web Applications

beroot

Privilege Escalation Project - Windows / Linux / Mac

bitvijays.github.io-sphinx

Sphinx

blackhoodie-2018-workshop

Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.

bloodhound

Six Degrees of Domain Admin

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

brutesploit

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p

bsidestampa2021

bug-bounty

Ressources for bug bounty hunting

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

buildium

burp-co2

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

burp-payloads

Burp Payloads

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"