https://github.com/mitre/caldera

Automated Adversary Emulation Platform

adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing

Last synced: 12 May 2025

https://github.com/jassics/security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

api-security application-security appsec appsec-tutorials aws-security azure-security cybersecurity cybersecurity-education devsecops-university gcp-security infosec pentesting security-testing study-guide study-plan study-planner

Last synced: 27 Jul 2025

https://github.com/payloadbox/command-injection-payload-list

🎯 Command Injection Payload List

application application-security bugbounty command command-injection injection linux macos os os-injection payload payload-list security security-research security-testing security-vulnerability unix vulnerability vulnerability-research windows

Last synced: 15 May 2025

https://github.com/opensec-cn/kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

poc-library proof-of-concept security-testing security-vulnerability

Last synced: 15 May 2025

https://github.com/wallarm/gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

api-security bugbounty graphql-security grpc-security owasp rest-security security security-testing security-tools waf web-application-firewall web-application-security

Last synced: 14 May 2025

https://github.com/Viralmaniar/Passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

cybersecurity default-credentials default-password password penetration-testing pentest-tool security security-testing

Last synced: 19 Jul 2025

https://github.com/viralmaniar/passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

cybersecurity default-credentials default-password password penetration-testing pentest-tool security security-testing

Last synced: 12 Apr 2025

https://github.com/akto-api-security/akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

api-discovery api-security api-security-testing api-testing authentication authorization devsecops devsecops-pipeline hacktoberfest hacktoberfest2023 idor owasp-top-10 security security-testing sensitive-data-exposure threat-detection

Last synced: 24 Dec 2025

https://github.com/bl4de/security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

bug-bounties bug-bounty bugbounty ctf ctf-tools hacking infosec itsecurity pentesting python scanner security-testing security-tools static-analysis webappsec

Last synced: 02 Apr 2025

https://github.com/fportantier/habu

Hacking Toolkit

hacking linux network-analysis networking penetration-testing pentest pentest-tool pentesting pentesting-networks python3 scapy security-audit security-testing security-tools windows

Last synced: 14 Dec 2025

https://github.com/secureCodeBox/secureCodeBox

secureCodeBox (SCB) - continuous secure delivery out of the box

devsecops hacktoberfest kubernetes kubernetes-operator owasp owasp-zap securecodebox security security-automation security-testing security-tools

Last synced: 30 Mar 2025

https://github.com/caringcaribou/caringcaribou

A friendly car security exploration tool for the CAN bus

can-bus ecu fuzzing python security-scanner security-testing xcp

Last synced: 02 Apr 2025

https://github.com/CaringCaribou/caringcaribou

A friendly car security exploration tool for the CAN bus

can-bus ecu fuzzing python security-scanner security-testing xcp

Last synced: 08 May 2025

https://github.com/anof-cyber/application-security

Resources for Application Security including Web, API, Android, iOS and Thick Client

android application-security appsec bugbounty cybersecurity hacking infosec penetration-testing penetration-testing-notes pentesting security security-testing

Last synced: 04 Apr 2025

https://github.com/Anof-cyber/Application-Security

Resources for Application Security including Web, API, Android, iOS and Thick Client

android application-security appsec bugbounty cybersecurity hacking infosec penetration-testing penetration-testing-notes pentesting security security-testing

Last synced: 26 Mar 2025

https://github.com/B3nac/InjuredAndroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

android android-security android-studio apk bug-bounty ctf flutter flutter-security flutter-xss kotlin kotlin-android pentesting security-testing vulnerabilities webview

Last synced: 08 Apr 2025

https://github.com/Marshall-Hallenbeck/red_team_attack_lab

Red Team Attack Lab for TTP testing & research

ansible hacking infosec lab penetration-testing pentesting red-team redteam security security-testing security-tools vagrant

Last synced: 12 Jul 2025

https://github.com/marshall-hallenbeck/red_team_attack_lab

Red Team Attack Lab for TTP testing & research

ansible hacking infosec lab penetration-testing pentesting red-team redteam security security-testing security-tools vagrant

Last synced: 20 Feb 2025

https://github.com/shodansploit/shodansploit

🔎 shodansploit > v1.3.0

intelligence python-script python-shodan security security-automation security-research security-scanner security-testing security-tools shodan shodan-api shodan-cli shodan-client shodan-python shodan-scripts shodan-tool shodan-tools shodansploit

Last synced: 02 Apr 2025

https://github.com/pyhackertarget/hackertarget

🎯 HackerTarget ToolKit - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery 🎯

dns extract-links extract-pages hackertarget http-header-check ip-location-lookup ping ping-test reverse-dns reverse-dns-lookups reverse-ip-lookup security security-testing security-tool security-tools subnet-lookup traceroute whois-lookup zone-transfers

Last synced: 30 Mar 2025

https://github.com/rust-fuzz/honggfuzz-rs

Fuzz your Rust code with Google-developed Honggfuzz !

crates fuzz fuzz-testing fuzzer fuzzing honggfuzz rust rust-fuzz sanitizer security security-testing security-tools

Last synced: 14 May 2025

https://github.com/enkomio/Taipan

Web application vulnerability scanner

application-security hacking hacking-tool security security-audit security-automation security-scanner security-testing security-tools taipan web web-application web-sec-scanner web-security web-security-research

Last synced: 02 Apr 2025

https://github.com/enkomio/taipan

Web application vulnerability scanner

application-security hacking hacking-tool security security-audit security-automation security-scanner security-testing security-tools taipan web web-application web-sec-scanner web-security web-security-research

Last synced: 01 Aug 2025

https://github.com/PaytmLabs/nerve

NERVE Continuous Vulnerability Scanner

security security-testing security-tools vulnerability-assessment vulnerability-detection vulnerability-scanners

Last synced: 30 Mar 2025

https://github.com/security-cheatsheet/metasploit-cheat-sheet

Metasploit Cheat Sheet 💣

exploit exploitation-framework metasploit metasploit-cheat-sheet metasploit-database metasploit-framework metasploit-framework-database meterpreter msfvenom payload rapid7 security security-cheat-sheets security-research security-testing

Last synced: 20 Mar 2025

https://github.com/flipkart-incubator/watchdog

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

application-security bugbounty cve-databases cve-search network-security penetration-testing-framework pentest-tool product-security security security-testing security-tools security-vulnerability vulnerability-assessment vulnerability-management

Last synced: 06 Apr 2025

https://github.com/narstybits/macos-duckyscripts

Presenting a wide range of more than 100 powerful BadUSB scripts exclusively designed for Mac OS & the Flipper Zero device. As the sole curator and maintainer of this repository. Your utilization of these scripts is highly valued, and I sincerely appreciate your support and enthusiasm!

badusb badusb-payloads bash-script ducky-payloads duckyscript flipper flipper-zero flipperzero pentesting security-testing

Last synced: 27 Oct 2025

https://github.com/narstybits/MacOS-DuckyScripts

Presenting a wide range of more than 100 powerful BadUSB scripts exclusively designed for Mac OS & the Flipper Zero device. As the sole curator and maintainer of this repository. Your utilization of these scripts is highly valued, and I sincerely appreciate your support and enthusiasm!

badusb badusb-payloads bash-script ducky-payloads duckyscript flipper flipper-zero flipperzero pentesting security-testing

Last synced: 22 Feb 2025

https://github.com/sterrasec/apk-medit

memory search and patch tool on debuggable apk without root & ndk

android android-security arsenal blackhat mobile-app-security mobile-security-testing security-testing security-tools

Last synced: 31 Oct 2025

https://github.com/vectra-ai-research/MAAD-AF

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

adversary-emulation azuread cloud-administration cloud-security entra-id identity-access-management microsoft microsoft-azure-security microsoft-graph microsoft365 mitre powershell red-team security security-testing ttp

Last synced: 15 Apr 2025

https://github.com/e-m-b-a/embark

EMBArk - The firmware security scanning environment

data-analysis django embedded-linux embedded-systems firmware firmware-analysis firmware-tools hacking iot linux penetration-testing pentesting scanner security security-automation security-scanner security-testing security-tools ubuntu-server vulnerability-scanners

Last synced: 16 May 2025

https://github.com/redcanaryco/chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

adversary-simulation elf linux mitre mitre-attack security security-testing

Last synced: 16 May 2025

https://github.com/mercedes-benz/sechub

SecHub provides a central API to test software with different security tools.

api appsec build client continuous-integration dast k8s orchestration rest sast sdlc secdevops sechub security security-automation security-scanner security-testing security-tools server vulnerability-scanners

Last synced: 16 May 2025

https://github.com/security-checklist/php-security-check-list

PHP Security Check List [ EN ] 🌋 ☣️

bugbounty checklist php php-framework php-library php-security php-security-checker security security-audit security-checklist security-research security-researcher security-testing web-application web-application-framework web-application-security webapplication

Last synced: 30 Mar 2025

https://github.com/jjf012/gopoc

用cel-go重现了长亭xray的poc检测功能的轮子

poc proof-of-concept security-testing vulnerability-scanner

Last synced: 11 Jul 2025

https://github.com/redline311/john-the-ripper

cracking-software data-protection ethical-cracking hash-decryption hybrid-attacks identity-verification it-security john-the-ripper multi-platform network-security open-source-security password-analyzer password-auditing password-recovery-tool penetration-tool security-auditing security-research security-testing system-security vulnerability-assessment

Last synced: 20 Mar 2025

https://github.com/trailofbits/siderophile

Find the ideal fuzz targets in a Rust codebase

fuzzing program-analysis rust security-testing

Last synced: 06 Oct 2025

https://github.com/tprynn/web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

application-security appsec documentation security security-testing web web-application web-application-security

Last synced: 11 Jul 2025

https://github.com/openraven/magpie

A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.

aws cloud cloudsecurity cspm gcp security security-audit security-scanner security-testing security-tools security-vulnerability

Last synced: 11 Jul 2025

https://github.com/paulveillard/cybersecurity

Welcome Cybersecurity's World. An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources in Cybersecurity.

computer-architecture computer-security cryptography cyber-physical-systems cybersecurity cybersecurity-awareness cybersecurity-blog cybersecurity-career-path cybersecurity-education cybersecurity-incidents defensive-security security security-audit security-automation security-hardening security-testing security-tools security-vulnerability

Last synced: 04 Apr 2025

https://github.com/sterrasec/ipa-medit

Memory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.

applesilicon arsenal blackhat ios ios-security m1 mobile-app-security mobile-security-testing security-testing security-tools

Last synced: 31 Oct 2025

https://github.com/suriyaa/keylogger

:closed_lock_with_key: Open Source Python Keylogger Collection

collection cybersecurity keylogger linux logging mac open-source python python-keylogger security security-testing security-tools travis-ci windows

Last synced: 17 Jul 2025

https://github.com/syss-research/wirebug

WireBug is a toolset for Voice-over-IP penetration testing

hacking man-in-the-middle pentest rtp security security-testing sip sips srtp unified-communications vlan voip

Last synced: 21 Aug 2025

https://github.com/OWASP/ASST

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

asst cybersecurity owasp owasp-top-10 security-assesment-security-tools security-assessments security-audit security-hardening security-testing vulnerability-assessment vulnerability-detection vulnerability-scanner vulnerability-scanners web-vulnerability-scanner web-vulnerability-scanners

Last synced: 30 Mar 2025

https://github.com/shnatsel/libdiffuzz

Custom memory allocator that helps discover reads from uninitialized memory

fuzz-testing fuzzing memory-allocator sanitizer security security-audit security-testing security-tools

Last synced: 16 Mar 2025

https://github.com/Shnatsel/libdiffuzz

Custom memory allocator that helps discover reads from uninitialized memory

fuzz-testing fuzzing memory-allocator sanitizer security security-audit security-testing security-tools

Last synced: 02 Apr 2025

https://github.com/yuawn/fuzzing

Fuzzing tutorial with easy-to-learn labs 🚀

101 afl automation education fuzz-testing fuzzing instrumentation klee llvm security-testing securtiy symbolic-execution testing tutorial vulnerability

Last synced: 15 Aug 2025

https://github.com/lucideus-repo/UnSAFE_Bank

Vulnerable Banking Suite

application-security cybersecurity ethical-hacking hacking learn learning-by-doing mobile-security security-testing security-vulnerability vulnerability-assessment vulnerable-android-apps vulnerable-applications vulnerable-ios-apps vulnerable-web-app vulnerable-webserver whitehat

Last synced: 11 Jul 2025

https://github.com/circl/url-abuse

URL Abuse - A Versatile Software for URL review, analysis and black-list reporting

csirt-activities security-testing security-tools url-abuse

Last synced: 21 Jun 2025

https://github.com/purpleteam-labs/purpleteam

CLI component of OWASP PurpleTeam

application-security build-tool ci cli cloud-security devsecops devsecops-pipeline hacktoberfest purpleteam security-regression-testing security-testing web-security

Last synced: 01 Apr 2025

https://github.com/vxcontrol/pentagi

✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

ai-agents ai-security-tool anthropic autonomous-agents golang gpt graphql multi-agent-system offensive-security open-source openai penetration-testing penetration-testing-tools react security-automation security-testing security-tools self-hosted

Last synced: 31 Mar 2025

https://github.com/falcosecurity/event-generator

Generate a variety of suspect actions that are detected by Falco rulesets

go kubernetes-auditing security security-testing syscall

Last synced: 05 Apr 2025

https://github.com/seungsoo-lee/DELTA

PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK

pentesting sdn security-testing software-defined-networking

Last synced: 21 Nov 2025

https://github.com/seungsoo-lee/delta

PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK

pentesting sdn security-testing software-defined-networking

Last synced: 04 Sep 2025

https://github.com/kpcyrd/boxxy-rs

Linkable sandbox explorer

regression-testing rust sandboxing security-testing

Last synced: 16 May 2025

https://github.com/Rektoff/Security-Roadmap-for-Solana-applications

We created a cybersecurity Systematization of Knowledge for Solana applications and protocols. We call it the Solana Security Strategy: such a database would be hugely beneficial for anyone who wants to secure their product and learn security from the best-collected resources.

blockchain-security rust security security-testing solana solana-program solana-security testing

Last synced: 25 Mar 2025

https://github.com/ciphermarco/BOAST

The BOAST Outpost for AppSec Testing: a server designed to receive and report Out-of-Band Application Security Testing (OAST) reactions.

appsec appsec-testing go golang security security-testing security-tools

Last synced: 10 May 2025

https://github.com/penetrate2hack/ITWSV

ITWSV- Integrated Tool for Web Security Vulnerability

auto-pentest kali kali-linux kali-linux-hacking kali-scripts kalilinux penetration-testing pentest pentest-tool pentesting security security-audit security-scanner security-testing security-vulnerability vulnerability vulnerability-detection vulnerability-scanners

Last synced: 30 Apr 2025

https://github.com/jay-johnson/owasp-jenkins

Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker? :whale: :shield: :lock:

ansible c-sharp dependency-checker django docker jenkins national-vulnerability-database node nvd owasp python react ruby-on-rails security security-automation security-testing security-vulnerability tensorflow vue zap

Last synced: 06 Oct 2025

https://github.com/infobyte/faraday_plugins

Security tools report parsers for Faradaysec.com

dast devsecops faradaysec pentesting security-automation security-testing security-tools security-vulnerability vulnerability-scanners

Last synced: 11 Dec 2025

https://github.com/itboxltda/pentestlab

Script to manage and create local pentesting training virtual lab

cybersecurity cybersecurity-training-lab laboratory-automation owasp pentesting-resources security-testing

Last synced: 12 Jul 2025

https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle0

:books: Overview :lock: Tooling :lock: Process :lock: Physical :lock: People :books:

agile book books devops devsecops hacking infosec people people-security people-test physical physical-security physical-test security security-audit security-review security-testing social-engineering threat-modeling websecurity

Last synced: 14 Mar 2025

https://github.com/frodox/execute-machine-code-from-memory

Proof of concept example: executing machine code from different memory areas: stack, heap, shared memory

c heap poc security security-testing shm stack

Last synced: 23 Aug 2025

https://github.com/vs4vijay/scanmaster

A security tool designed to perform thorough scans on a target using OpenVAS, Zap, and Nexpose. It seamlessly consolidates and integrates the scan results, providing a comprehensive overview of the security vulnerabilities identified.

application-security cli nexpose openvas openvas-cli openvas-reports owasp owasp-top owasp-zap security-audit security-scanner security-testing security-tools security-vulnerability web-application-security zap

Last synced: 29 Apr 2025

https://github.com/aktsk/aprox

android proxy setting tool

android android-security mobile-app-security mobile-security-testing security-testing

Last synced: 02 Mar 2025

https://github.com/deep5050/cppcheck-action

A github action to perform C/C++ security checks automatically

analysis c code-quality code-review cpp cppcheck-action cppcheck-documentations dangerous-coding-constructs performance-analysis security-testing static-analysis vulnerability-detection

Last synced: 10 May 2025

https://github.com/contrast-security-oss/safelog4j

Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading

iast java log4j log4shell rasp security security-testing vulnerability vulnerability-scanner

Last synced: 11 Sep 2025

https://github.com/404notf0und/ai-for-security-testing

My AI security testing projects

ai deeplearning machine-learning security security-testing

Last synced: 12 Apr 2025

https://github.com/Contrast-Security-OSS/safelog4j

Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading

iast java log4j log4shell rasp security security-testing vulnerability vulnerability-scanner

Last synced: 11 Jul 2025

https://github.com/sadeghhayeri/lol-hacking

My Hacking Activities!

cas hack hacking security security-testing ut-cas web-hacking

Last synced: 28 Feb 2025

https://github.com/ionutbalosin/java-application-security-practices

Application security best practices and code implementations for Java developers. This project is intended for didactic purposes only, supporting my training course.

api-security authorization-code-flow authorization-code-flow-with-pkce client-credentials-flow cors csp dast java-process-security json-web-key-set jwks oauth-grant-types password-flow roles-based-access-control sast sca security-design-principles security-logging security-testing token-introspection

Last synced: 22 Apr 2025

https://github.com/paulveillard/cybersecurity-application-security

An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security

application application-security appsec developer-security endpoint-security mdm-server mobilesecurity security-advisory security-hardening security-scanner security-testing security-tools security-vulnerability vulnerability-scanners web-security web-security-research

Last synced: 10 Apr 2025

https://github.com/Soluto/owasp-zap-glue-ci-images

Ready to use images of Zap and Glue, especially for CI integration.

ci docker-image owasp security-testing

Last synced: 11 May 2025

https://github.com/pentesttoolscom/pentesttools-github-action

Scan your web apps for vulnerabilities, misconfigurations, and other security issues with the Pentest-Tools.com command-line program.

ci cicd cli continuous-delivery continuous-integration penetration-testing security security-audit security-automation security-hardening security-scanner security-testing security-tools vulnerability-assessment vulnerability-detection vulnerability-scanners

Last synced: 03 Apr 2025

https://github.com/sectool/python-pentest-toolkit

Pentest ToolKit

cyber-security cybersecurity github github-projects penetration penetration-testing penetration-testing-framework pentest-toolkit pentesting project security security-scanner security-test security-testing security-tools security-vulnerability security-vulnerability-assessment toolkit toolkits tools

Last synced: 29 Apr 2025

https://github.com/syss-research/lauschgeraet

Gets in the way of your victim's traffic and out of yours

802-1x mitm pentest security-testing security-tools tls traffic-analysis

Last synced: 10 Apr 2025

https://github.com/vectra-ai-research/Halberd

Cloud security testing tool to execute a comprehensive array of attack techniques across multiple surfaces via a simple web interface.

attack-defense aws azure azuread blueteam-tools cloud-security detection entra-id m365 microsoft mitre-attack offensive-security offensivesecurity redteam redteam-tools security-testing security-tools ttp

Last synced: 06 Mar 2025

https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle1

:books: VPS :lock: Network :lock: Cloud :lock: Web Applications :books:

book books cloud cloud-security devops devsecops hacking network network-security security security-audit security-review security-testing ssh tls vps vps-security web-application-security webapp

Last synced: 13 Jun 2025

https://github.com/gdgd009xcd/RequestRecorder

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

activescan addon authentication csrf multistep multistep-form security security-testing security-tools vulnerability-scanners web-security webcrawler websecurity zap-extension zaproxy

Last synced: 31 Oct 2025

https://github.com/sectool/python-nikto-vulnerability-report-tool

Nikto Vulnerability Report Tool 🌌

nikto penetration-testing pentest-tool pentesting project python-application python-apps python-project report report-tool reporting security-scanner security-testing security-tools security-vulnerability vulnerabilities vulnerability vulnerability-report vulnerability-scanners vulnerable

Last synced: 18 Oct 2025

https://github.com/hcl-tech-software/appscan-codesweep-action

Integrate static security testing with HCL AppScan CodeSweep with Github.

action appscan codesweep github github-actions sast scanning security security-automation security-scanner security-testing security-tools

Last synced: 19 Apr 2025

https://github.com/exploitworks/desyncdiver

A tool for detecting HTTP Request Smuggling vulnerabilities

bash-script bugbounty ctf-tools cybersecurity desynchronization hacking-tool http-desync http-request-smuggling http-security penetration-testing pentesting protocol protocol-attack request-smuggling security-testing vulnerability-scanners web-application-security web-security

Last synced: 12 Apr 2025

https://github.com/wakeful/veil

Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)

aws blue blue-team blue-team-tool blueteam blueteam-tools cybersecurity penetration-testing recon security security-auditing security-automation security-testing security-tools

Last synced: 04 Sep 2025

https://github.com/das-group/rba-dataset

Login feature data of more than 33M login attempts and 3M users (IP, UA, RTT)

authentication data-set ip-address login-data risk-based-authentication round-trip-time security-testing user-agent

Last synced: 26 Feb 2025

https://github.com/r3k4t/phone-number-info

Phone-number-info is a Phone Number Information Gathering Tool.

forensic-analysis forensics-investigations network-engineering python security-research security-testing software-development software-engineering

Last synced: 28 Jul 2025

https://github.com/paulveillard/cybersecurity-tools

A collection of cybsecurity tools, software, libraries, learning tutorials, frameworks, academic and practical resources in security.

automation blueteam cyber-analytics cyber-security cyberattack cybersecurity devops incident-management incident-response incidents incidents-attack redteam security security-hardening security-testing security-tools security-vulnerability threat threat-intelligence tools-engineering

Last synced: 28 Mar 2025

https://github.com/benmccallum/blip

Test business websites for speed, usability, security and the HTML5 doctype in a neighbourhood or by URL.

automated-testing performance-testing security-testing testing testing-tools usability-testing

Last synced: 11 Mar 2025

https://github.com/binarymist/holisticinfosec-for-webdevelopers-fascicle2

:books: IoT :lock: Mobile :books:

android book books devops devsecops hacking infosec iot iot-security iot-security-testing iot-testing mobile mobile-security mobile-security-testing security security-audit security-review security-testing threat-modeling

Last synced: 11 Jul 2025

https://github.com/thomashartm/burp-domsink-logger

Injects a trusted types policy into an HTML page to log all DOM sinks whenever HTML is written into the DOM.

burp burp-extensions burp-plugin burpsuite-extender cross-site-scripting domxss java javascript penetration-testing-tools security-testing security-tools trusted-types

Last synced: 23 Mar 2025

https://github.com/jacyuan1/attenuation-of-relay-attacks-on-passive-keyless-entry

Neutralizing relay attacks on passive keyless vehicles.

accelerometer cars carsim embedded-development passive-keyless-entry pke pkes python rasberry-pi-4 raspberry-pi-3 research-project security security-testing transciever vehicle-detection vehicle-security-design vehicles

Last synced: 26 Oct 2025

https://github.com/karma9874/authinspector

Automated authorization checks with multiple headers tool written in golang

authorization bug-bounty golang privilege-escalation security-scanner security-testing security-tools

Last synced: 24 Jul 2025

https://github.com/omerlh/container-security-testing

A list of security testing tools for containerized applications

appsec cicd containers devsecops docker kubernetes security-testing

Last synced: 11 Oct 2025

https://github.com/lamsut/ths2024-77

PHP web application for Information Security education, utilizing OpenStack for security testing practices

ctf-challenges information-security mysql openstack php security-testing

Last synced: 14 Apr 2025

https://github.com/qainsights/do-not-say-non-functional

Do Not Say Non-Functional

accessbility-testing performance-testing quality-assurance security-testing software-testing testing

Last synced: 09 Aug 2025

https://github.com/lamsut/w0rm

PHP web application for Information Security education, utilizing OpenStack for security testing practices

ctf-challenges information-security openstack php security-testing

Last synced: 13 Sep 2025

https://github.com/rhymeswithmogul/security-txt-parser

Fetch and parse a website's security.txt file.

foudil parser php php7 reporting-tool security-audit security-automation security-research security-researcher security-team security-testing security-tools security-txt

Last synced: 01 Sep 2025

https://github.com/thomasleplus/jwt-utils

A few utilities to work with JWTs.

crypto cryptography information-security infosec jwt jwt-bearer-tokens jwt-token jwt-tokens openid openid-connect openidc openidconnect security security-testing security-tools shell shell-script shell-scripts shellscript

Last synced: 14 Apr 2025

https://github.com/hcl-tech-software/appscan-sast-action

Integrate static security testing with HCL AppScan on Cloud using GitHub Actions

action appscan github github-actions sast scanning security security-automation security-scanner security-testing security-tools

Last synced: 31 Aug 2025

https://github.com/jul10l1r4/identificador-cve-2018-11759

This exploit for CVE 2018-11759, vulnerability in apache mod_jk, module for load-balancer

apache2 cve cve-2018-11759 load-balancer module protection safe security security-testing

Last synced: 16 May 2025

https://github.com/geniuszly/GenProxyJSChecker

is a Node.js tool designed to validate the functionality of various types of proxy servers, including HTTP, HTTPS, SOCKS4, and SOCKS5. It reads a list of proxies from a file, checks each proxy's connectivity using the specified protocol, and logs the results.

automation checker cybersecurity ethical-hacking genproxyjschecker javascript js network-security network-tools nodejs penetration-testing proxy proxy-checker proxy-detection security-testing web-security

Last synced: 07 May 2025