sagarchhatrala Goto Github PK

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

assignment

foca

Tool to find metadata and hidden information in the documents.

http-desync-guardian

Analyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request splitting/smuggling).

mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

oauth-2.0-security-cheat-sheet

oauth security guidelines

poc

PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus

rbac-lookup

Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

red-kube

Red Team K8S Adversary Emulation Based on kubectl

root-me.org

rshijack

tcp connection hijacker, rust rewrite of shijack

shellcheck

ShellCheck, a static analysis tool for shell scripts

skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project

talks

Talks / Conferences

tls-redirection

TLS Redirection

vulnerable-oauth-2.0-applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

weird_proxies

Reverse proxies cheatsheet

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.