orlyjamie Goto Github PK

angular-cli

CLI tool for Angular

asnrecon

ASN reconnaissance script

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

chieffancypants

cloud-testing-guide

hosts

Consolidating and extending hosts files from several well-curated sources. You can optionally pick extensions to block pornography, social media, and other categories.

jks

JKS Systems

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

lighthauz.github.io

markdown-badges

Badges for your Profile and Projects.

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

mutillidae

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiast. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software.

node-apn

:calling: Apple Push Notification module for Node.js

nuclei-action

Vulnerability Scan with Nuclei

owasp.github.io

OWASP Foundation main site repository

pam-poc

Ghetto forensics repo. Maybe useful in reversing the Optus API issue.

sales-demo.lab.trusona.net

sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

shiftleft-java-demo

shiftleft-js-demo

shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

snyk

CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies

vault

A tool for secrets management, encryption as a service, and privileged access management

what-if

wstg

The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.