soufianely Goto Github PK

2017submissions

Pwn2Win CTF 2017 submissions

a-gentle-introduction-to-tamarin

This is a beginner's Tamarin Guide which is not meant to be exhaustive. For a comprehensive explanation of Tamarin, please refer to the official manual on https://tamarin-prover.github.io.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apisandbox

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.

apkatshu

Apkatshu is a Tool for extracting urls , emails , ip address , and interesting data from APK files

at-ps

Adversary Tactics - PowerShell Training

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-exploit-development

awesome-incident-response

A curated list of tools for incident response

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of red team resources

azure_workshop

binary_exploitation

Notes and goodies to make binary exploitation life easier

brashendeavours.gitbook.io

breach-parse

A tool for parsing breached passwords

buffer-overflows

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

c2-jarm

A list of JARM hashes for different ssl implementations used by some C2/red team tools.

cachetalk

Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching

cc-lambda

Search the common crawl using lambda functions

certview

Platform that collects TLS certificates from active scans and certificate transparency logs and allows modules to perform analysis and provide tags.

cloud-penetration-testing-and-red-teaming

Tools, Resources & Helpful Tips

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

code-review-checklist

This code review checklist helps you be a more effective and efficient code reviewer.

cowitness

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.