albertoru11 Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-web-hacking

A list of web application security

caldera

Scalable Automated Adversary Emulation Platform

dnscat2

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

free-programming-books

:books: Freely available programming books

fuxploider

File upload vulnerability scanner and exploitation tool.

gobuster

Directory/file & DNS busting tool written in Go

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

oscp-survival-guide-1

oscp-survival-guide_

Not mine just forked from a DMCA old repo from fritz user

ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient @owtfp http://owtf.org

privilege-escalation

This contains common local exploits and enumeration scripts

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwntools

CTF framework and exploit development library

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sqlmap

Automatic SQL injection and database takeover tool

ssh-badkeys

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

webshell

This is a webshell open source project

wpscan

WPScan is a black box WordPress vulnerability scanner