silva-andrre Goto Github PK

devsecops-playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

dirsearch

Web path scanner

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

dnspy

.NET debugger and assembly editor

docker-bench

Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

erc.xdbg

An Xdbg Plugin of the ERC Library.

estudos_c

Repositório utilizado para armazenar os códigos de estudos criados na Linguagem C.

evtx-attack-samples

Windows Events Attack Samples

exploit_training

The best resources for learning exploit development

faraday

Collaborative Penetration Test and Vulnerability Management Platform

firstrepo

Meu primeiro Repo no GitHub via git cmd

fundamentos-engenharia-reversa

Livro: Fundamentos de Engenharia Reversa

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

getting-started

Getting started with Docker

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

github-dorks

Find leaked secrets via github search

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

go

The Go programming language

grupo-estudos-golang

Material para estudo de Golang, tutoriais, videos e exemplos para quem quer aprender Go

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

guiassdlc

Guia criado para compartilhar minha experiência e conhecimentos em criar, utilizar e evoluir, esteiras de desenvolvimento seguro.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

huskyci

Performing security tests inside your CI

impacket

Impacket is a collection of Python classes for working with network protocols.

interview-questions

Real Cyber Security Interview Questions for Various Job Roles

java-goof

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

krbrelayx

Kerberos unconstrained delegation abuse toolkit