security-prince Goto Github PK

salus

Security scanner coordinator

sas-top-10

Serverless Architectures Security Top 10 Guide

scripts

A collection of useful scripts for penetration testers

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sectest

Docker Automated Build for Security Testing Tools

secure-ios-app-dev

Collection of the most common vulnerabilities found in iOS applications

security

security-1

A collection of software, libraries, documents, books, resources and cools stuffs about security.

security-automation-with-ansible-2

Ansible Playbooks for Security Automation with Ansible2 book

security-notes

:notebook: Some security related notes

security-prince

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

security_circle_2017

security_list

Great security list for fun and profit

security_whitepapers

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

serverless

Serverless 架构应用开发指南 - Serverless Architecture Application Development Guide with Serverless Framework.

serverless_toolkit

A collection of useful Serverless functions I use when pentesting

shelling

SHELLING - an offensive approach to the anatomy of improperly written OS command injection sanitisers

shop-web-site

a shop web site using python flask, bootstrap, jquery with a Good-looking appearance。

slae

Example ASM code following SLAE course and exam assignments

so-sql-injections

SQL injection vulnerabilities in Stack Overflow PHP questions

sourcecodesniffer

The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.

spring-security

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqliv

(SQLiv) massive SQL injection vulnerability scanner

sqlmap

Automatic SQL injection and database takeover tool

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

stream-handbook

how to write node programs with streams

stripe-ctf-2.0

Capture the Flag: Web Edition https://stripe.com/blog/capture-the-flag-20

student-service

Demonstration of how we can connect to cassandra, elasticsearch using spring boots 2