anthonyherman Goto Github PK

action-baseline

A GitHub Action for running the OWASP ZAP Baseline scan

action_test

anthonyherman

anthonyherman.github.io

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-api-security

A collection of awesome API Security tools and resources.

awesome-hacker-search-engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

awesome-malware-development

Organized list of my malware development resources

azure_devops_vault_interaction

Azure DevOps extension to interact with HashiCorp Vault.

blueprint-securesoftwarepipeline

For engineers and security teams driving fast and secure software supply chains

bug-bounty-roadmaps

Bug Bounty Roadmaps

charts

Curated applications for Kubernetes

checkov-action

A Github Action to run Checkov against an Infrastructure-as-Code repository. Checkov does static security analysis of Terraform, CloudFormation, Kubernetes, serverless framework and ARM templates

co2-graphite

codeql-uboot

csharp-alt-shellcode-callbacks

A collection of (even more) alternative shellcode callback methods in CSharp

css-in-readme-like-wat

Style your readme using CSS with this simple trick

dependabottest

github-actions-issue-to-work-item

GitHub Action that creates a Azure DevOps work item when an Issue is created

github-pages-with-jekyll

golangtest

helmrepo

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

jndiexploit

A malicious LDAP server for JNDI injection attacks

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

linguist

Language Savant. If your repository's language is being reported incorrectly, send us a pull request!

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

open-source-security-guide

Open Source Security Guide