willpowerforever Goto Github PK

bonesi

BoNeSi - the DDoS Botnet Simulator

cewl

CeWL is a Custom Word List Generator

dependency-check-plugin

Jenkins plugin for OWASP Dependency-Check. This can be used to monitor the java libraries used in an application and report if there are any known vulnerabilities (e.g. CVEs).

dependencycheck

OWASP dependency-check is a utility that detects publicly disclosed vulnerabilities in application dependencies.

digestive

Dictionary cracking tool for HTTP Digest challenge/response hashes

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

dnsrecon

DNS Enumeration Script

dockerscan

Docker security analysis & hacking tools

dpapick

ffuf

Fast web fuzzer written in Go

foca

Tool to find metadata and hidden information in the documents.

format-preserving-encryption-java

Format-Preserving Encryption Implementation in Java

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

gosdl

goSDL

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

ipwn

itext7

iText 7 for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText 7 can be a boon to nearly every workflow.

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.

mackenzie

AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC

mimikatz

A little tool to play with Windows security

mobile_security

osinttools

A collection of random OSINT scripts

p6spy

P6Spy is a framework that enables database data to be seamlessly intercepted and logged with no code changes to the application.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pdfbox

Mirror of Apache PDFBox

pytm

A Pythonic framework for threat modeling

rasticrac

Rasticrac v3.2.5 is for Crack IPA file, like Clutch, this is a copy from appaddict.org, just for study. Now support PlugIn and Watch App.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

red_team_tool_countermeasures

scorecard

Security Scorecards - Security health metrics for Open Source