righteousgambit Goto Github PK

crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

crossfeed

External monitoring for organization assets

cyberdic

An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

danderspritz_lab

A fully functional DanderSpritz lab in 2 commands

devopskit

devopskit-policies

devsecops

A repo for testing and demonstration purposes.

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

docker-bloodhound

BloodHound Docker Ready to Use

dockerfile-image-update

A tool that helps you get security patches for Docker images into production as quickly as possible without breaking things

domain-protect

Protect against subdomain takeover

domain-protect-gcp

Protect against subdomain takeover

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

dotnetcore-webapp

dotnet new webapp

edda

AWS API Read Cache

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

engineering-principles

Skyscanner's Engineering Principles

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

eyeballer

Convolutional neural network for analyzing pentest screenshots

fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

foolbox

A Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, and JAX

gcp_api_key_inventory

Inventory, analyze, and report on your GCP API keys in an automated fashion.

gcp_org_policy_notifier

Be notified in the event of a new GCP Organization Policy being released.

gcp_sa_lister

Crawls your GCP Org and returns service accounts that have not been used in the past 90 days.

gcp_threat_detection_auto_remediation

This repo contains all you need to begin automating Event Threat Detection findings.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

gitoops

all paths lead to clouds

gograbber

A horizontal and vertical web content enumerator