ndoell Goto Github PK

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

bug-bounty

cautious-bassoon

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

dependency-confusion-expoit

devsecops

🔱 Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

dockle-action

Runs dockle as GitHub Action

gato

GitHub Self-Hosted Runner Enumeration and Attack Tool

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

kali-setup

Initial setup of Kali

kdt

lcd-show-kali

3.2" 3.5" 5.0" 7.0" TFT LCD Kali driver for the Raspberry PI and PI 2 and PI 3

md5-comparison

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

myutility_internal

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

owasp-masvs

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security. It is meant to be used by mobile software architects and developers seeking to develop secure mobile applications and as a basis for mobile app security testing methodologies. The MASVS lists requirements for both security controls and software protection mechanisms, and defines four verification levels that can be applied to achieve different grades of security and resiliency.

portfinder

Find a new port and return

requests

A simple, yet elegant, HTTP library.

scripts

securitytest

terraform-provider-mongodbatlas

Terraform MongoDB Atlas Provider: Deploy, update, and manage MongoDB Atlas infrastructure as code through HashiCorp Terraform

tj-jpt

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

zaproxy

The OWASP ZAP core project