totoroha Goto Github PK

aardvark

Aardvark is a multi-account AWS IAM Access Advisor API

abatchy17.github.io

Personal blog about security, exploitation, CTFs, ...

adape-script

Active Directory Assessment and Privilege Escalation Script

adfsdump

adfspoof

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

ail-framework

AIL framework - Analysis Information Leak framework

airiam

Least privilege AWS IAM Terraformer

alby

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

api-security

OWASP API Security Project

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api-to-event

A repo to document API functions mapped to security events across diverse platforms

application-security-engineer-interview-questions

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

appsec_interview_qna

Common Security Interview Questions with Answers

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

astra

Automated Security Testing For REST API's

atomic-red-team

Small and highly portable detection tests.

attack-python-client

Python Script to access ATT&CK content available in STIX via a public TAXII server

auto-root-exploit

Auto Root Exploit Tool

autolocalprivilegeescalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

awesome-appsec

A curated list of resources for learning about application security

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-k8s-security

A curated list for Awesome Kubernetes Security resources

awesome-kubernetes

A curated list for awesome kubernetes projects, tools and resources.

awesome-ninja-admins

:dizzy: A collection of awesome lists, manuals, blogs, hacks, one-liners and tools for Awesome Ninja Admins.

awesome-password-security

tools and strategies for users to create stronger and more memorable passwords

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things