sec-erick Goto Github PK

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

appsec

Config files for my GitHub profile.

astra

Automated Security Testing For REST API's

bugbountytoolkit

A multi-platform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

caldera

Scalable Automated Adversary Emulation Platform

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

hacker

Hacker is a Jekyll theme for GitHub Pages

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

magic-checklist-for-web-applications

Web Security Checklist (Bug Bounty & Pentesting)

pentbox

PentBox is a tool that allows us to create honeypot in our system this is written in ruby language.

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

shcheck

A basic tool to check security headers of a website

sn1per

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

soc

xsstrike

Most advanced XSS scanner.