aleeeeks Goto Github PK

api-hacking-notebook

These are my personal notes for everything I learned regarding hacking APIs. Enjoy.

awesome-sec-s3

A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

cloudsploit

Cloud Security Posture Management (CSPM)

crapi

completely ridiculous API (crAPI)

dvwa

Damn Vulnerable Web Application (DVWA)

graphql-cop

Security Auditor Utility for GraphQL APIs

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full F

item-catalogue

A web application that provides a list of items within a variety of categories as well as provide a user registration and authentication system. Registered users will have the ability to post, edit and delete their own items.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

lazys3

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

onelistforall

Rockyou for web fuzzing

oscpnotes

Here are all the notes I personally took while studying for the OSCP which helped me pass.

owasp-web-checklist

OWASP Web Application Security Testing Checklist

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

qark

Tool to look for several security related Android application vulnerabilities

simplehttpserver

Go alternative of python SimpleHTTPServer

sliver

Adversary Emulation Framework

tbhm

The Bug Hunters Methodology

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

webgoat

WebGoat is a deliberately insecure application

xss.png

A XSS mind map ;)