tundeogunkoya Goto Github PK

oss-fuzz

OSS-Fuzz - continuous fuzzing of open source software

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

predix-rmd-ref-app

predix-rmd

public_drown_scanner

DROWN Vulnerability scanner - affecting openSSL , SSLv2

pwned-check

Deprecated, use the v2 API directly or download the userscript here:

pyrfc

PyRFC - The Python RFC Connector

python-journey-from-novice-to-expert

Code repository for Python Journey from Novice to Expert, published by Packt

python-threatdetection-projects

How to use it, please visit my blog @ https://selfieblue.wordpress.com/2015/11/14/python-threat-detection-application/

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

reversinglabs-yara-rules

ReversingLabs YARA Rules

rtfm

Red Team Field Manual

sap_exploit

Here you can get full exploit for SAP NetWeaver AS JAVA

sap_gw_rce_exploit

SAP Gateway RCE exploits

sap_ms

SAP Message Server research presented at OPCDE 2019

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

sapytools

Collection of sysadmin python tools

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

seeker

Accurately Locate Smartphones using Social Engineering

seekr

A multi-purpose OSINT toolkit with a neat web-interface.

sliver

Adversary Emulation Framework

sn1per

Automated Pentest Recon Scanner

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

thehivedocs

Documentation of TheHive

threadfix

ThreadFix is a software vulnerability aggregation and management system that helps organizations aggregate vulnerability data, generate virtual patches, and interact with software defect tracking systems.

threatdetection

tlosint-live

Trace Labs OSINT Linux Distribution based on Kali.

volatility

An advanced memory forensics framework

vsaq

VSAQ is an interactive questionnaire application to assess the security programs of third parties.