isaac007-ike Goto Github PK

apiscanner

archerysec

Automate Your Application Security Orchestration And Correlation (ASOC) Using ArcherySec.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

aws_cpt

AWS Cloud Pentest Utility - Helper scripts for a quicker Cloud PT on AWS environments

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

azure-red-team

Azure Security Resources and Notes

bandit

Bandit is a tool designed to find common security issues in Python code.

bbot

A recursive internet scanner for hackers.

bdd-security

BDD Automated Security Tests for Web Applications

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

bundler-audit

Patch-level verification for Bundler

burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.

cisco-rce

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

crass

Code Review Audit Script Scanner

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2022-42889-rce

Proof of Concept for CVE-2022-42889 (Text4Shell Vulnerability)

dawnscanner

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

devsecops

🔱 Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

devskim

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

django-defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

dnsrecon

DNS Enumeration Script

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

git-hound

Git plugin that prevents sensitive data from being committed.

git-secrets

Prevents you from committing secrets and credentials into git repositories