security-kma Goto Github PK

api-backend

REST API backend for Reconmap

apicheck

The DevSecOps toolset for REST APIs

auto-ossec

Automation Agent OSSEC installing tool

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

bug-bounty-roadmaps

Bug Bounty Roadmaps

bug-bounty-toolz

BBT - Bug Bounty Tools

bugs-feed

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

burp-plugin

A Burp plugin to export findings to DefectDojo

ceh-v11-study-guide

chopchop

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

commix

Automated All-in-One OS command injection and exploitation tool.

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

csec

A Collection of all things Security

cve-2021-40444

CVE-2021-40444 PoC

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

devsecops

🔱 Collection and Roadmap for everyone who wants DevSecOps.

dive

A tool for exploring each layer in a docker image

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

dotnetdeserializationscanner

Scans for .NET Deserialization Bugs in .NET Assemblies

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

generic-university

Vulnerable API

graphw00f

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

gvm-docker

Greenbone Vulnerability Management Docker Image with OpenVAS

gvm_install

A script to install GVM 20 or 21 on Ubuntu 20.04 or Debian 10.

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

insecure-deserialization-.net-rce

Insecure deserialization POC on .NET Framework applications. Attack vectors leads to RCE (Remote Code Execution)