coloristlife Goto Github PK

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

penetrationtestlabsetup

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

practical-cryptography-for-developers-book

Practical Cryptography for Developers: Hashes, MAC, Key Derivation, DHKE, Symmetric and Asymmetric Ciphers, Public Key Cryptosystems, RSA, Elliptic Curves, ECC, secp256k1, ECDH, ECIES, Digital Signatures, ECDSA, EdDSA

preparation-aws-certification-security-specialty-scs-c01

Notes, curated resources (both local and linked) and other materials for use in my preparation for AWS's Certified Security Specialty (SCS-C01) exam

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls and many more additional checks that help on GDPR, HIPAA and other security frameworks.

razorvulnerableapp

DO NOT USE: this is a vulnerable ASP.NET web app using Razor templating engine. The vulnerability is a Server-Side Template Injection (SSTI). For training and testing purposes.

remotecode

rengine

reNgine is a reconnaissance engine(framework) that does end-to-end reconnaissance with the help of highly configurable scan engines and does information gathering about the target web application. reNgine makes use of various open-source tools and makes a configurable pipeline of reconnaissance.

s3-account-search

S3 Account Search

scoutsuite

Multi-Cloud Security Auditing Tool

social-core

spring-microservices

Spring Microservices using Spring Cloud

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

studyfiles

一些经典且高质量的电子书分享

tech-books-library

📚e-books in PDF and ePub formats across a wide range of technology stacks and topics

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

thebook

Links and resources for the O'Reilly Kubernetes Security book

threat-model-cookbook

This project is about creating and publishing threat model examples.

threatmodel-for-aws-s3

ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach

typora-portable

The portable version of typora, 绿色免安装版Typora。

vue-client-side-template-injection-example

Example: Client-Side Template Injection with Vue

vue-v-bind-xss

Vue.js XSS with v-bind sample.

vue-xss-poc

vuejs-serverside-template-xss

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

wangyi3060

Config files for my GitHub profile.

webpack-starter

✨ A lightweight foundation for your next webpack based frontend project.