flowryan1 Goto Github PK

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

ctfd

CTFs as you need them

dvrf

The Damn Vulnerable Router Firmware Project

fosscomm

hackazon

A modern vulnerable web app

mcir

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

mellivora

Mellivora is a CTF engine written in PHP

mimikatz

A little tool to play with Windows security

netsec

nightshade

A simple capture the flag framework.

nsa-rules

Password cracking rules and masks for hashcat that I generated from cracked passwords.

nsa_equation_group_leak

FIREWALL EXPLOITS COPY OF NSA EQUATION GROUP SHADOW BROKERS

nsablocklist

HOSTS file to block all known NSA / GCHQ / C.I.A. / F.B.I. spying servers

owasp-goatdroid-project

OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a location-based social network, and Herd Financial, a mobile banking application. There are also several feature that greatly simplify usage within a training environment or for absolute beginners who want a good introduction to working with the Android platform. Download the built version here: https://github.com/jackMannino/OWASP-GoatDroid-Project/downloads

security-scripts

A collection of public offensive and defensive security related scripts for InfoSec students.

sentineltestbed

Vulnerable web site. Used to test sentinel features.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqlilabs

Lab set-up for learning SQL Injection Techniques

triton

Joyent Triton DataCenter: a cloud management platform with first class support for containers.

virtuaplant

VirtuaPlant is a Industrial Control Systems simulator which adds a “similar to real-world control logic” to the basic “read/write tags” feature of most PLC simulators.

wackopicko

WackoPicko is a vulnerable web application used to test web application vulnerability scanners.

webgoat.net

OWASP WebGoat.NET

xvwa

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.