stephanas50 Goto Github PK

ansible

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy. Avoid writing scripts or custom code to deploy and update your applications— automate in a language that approaches plain English, using SSH, with no agents to install on remote systems.

attack-website

MITRE ATT&CK Website

autotriagebot

AutoTriageBot automatically verifies, deduplicates, and suggests payouts for incoming HackerOne reports.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

distroless

🥑 Language focused docker images, minus the operating system.

dive

A tool for exploring each layer in a docker image

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

ghunt

🕵️‍♂️ Investigate Google Accounts with emails.

grr

GRR Rapid Response: remote live forensics for incident response

helloworld

metasploit-framework

Metasploit Framework

mnemosyne

A Generic Windows Memory Scraping Tool

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

mojo_thor

Research about malware that infects the EFI and SMC of Apple MacBooks.

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

phish-ai-api

Official python API for Phish.AI public and private API to detect zero-day phishing websites

piper

Creates a local or remote port forwarding through named pipes.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sfpoldevchk

Salesforce Policy Deviation Checker

the-soc-shop

Repository of scripts/tools that may be useful in Security Operations Centres (SOC)

virustotal

Pythonic VirusTotal Public API 2.0 client

wpscan

WPScan is a black box WordPress vulnerability scanner

write-ups-2016

Wiki-like CTF write-ups repository, maintained by the community. 2016