mentsh Goto Github PK

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

autosecurity

awesome-appsec

A curated list of resources for learning about application security

awesome-bug-bounty

awesome-incident-response

A curated list of tools for incident response

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

awesomexss

Awesome XSS stuff

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

bypass-403

Curl script for 403 attempted bypass

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

down-the-rabbit-hole

Blue Team Operations

fuzz-lightyear

A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos engineering testing and stateful, Swagger fuzzing.

gibsonbird

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

gray-hacker-resources

👾Useful for CTFs, wargames, pentesting. For fun or profit. 👾

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

infosec-resources4all

Only the best quality InfoSec-resources shared, based on regular sourcing of publicly available content found on the internet.

infosec_getting_started

A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.

infosectraining

tutorials and books for training

interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

ios-penetration-testing-cheat-sheet

Work in progress...

knock

Knock Subdomain Scan

lazyrecon

An automated approach to performing recon for bug bounty hunting and penetration testing.

leostrike

Scripts used during the investigation of LeoStrike (How to Hack Like a Rockstar)

malware

Course materials for Malware Analysis by RPISEC