security-kma Goto Github PK

insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

isoc

:bar_chart: Deploy an "illegal" SOC to manage vulnerabilities on your city servers in minutes.

karate

Test Automation Made Simple

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

mind-maps

Mind-Maps of Several Things

mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

mongo-objectid-predict

Predict Mongo ObjectIds

odat

ODAT: Oracle Database Attacking Tool

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

oscp-prep

Contained is all my reference material for my OSCP preparation. Designed to be a one stop shop for code, guides, command syntax, and high level strategy. One simple clone and you have access to some of the most popular tools used for pentesting.

parth

Heuristic Vulnerable Parameter Scanner

peirates

Peirates - Kubernetes Penetration Testing tool

pfsense

deadlineLPI

practical-malware-analysis

Exercise writeups from the book Practical Malware Analysis.

python-cheatsheet

Comprehensive Python Cheatsheet

reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

security-kma.github.io

security-kma2.github.io

A refreshed version of Hyde for Jekyll 3.x and 4.x

skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project

splunk-add-on

splunk-agent-script

threat_hunting

Some Threat Hunting queries useful for blue teamers

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

turdshovel

Dump objects from .NET dumps.

upload-scanner

HTTP file upload scanner for Burp Proxy

uploader

Burp extension to test for directory traversal attacks in insecure file uploads

vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

vucsa

Vulnerable Client-Server Application (VuCSA) is made for learning/presenting how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface).

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

wazuh-docker

Wazuh - Docker containers