mike-lesniak Goto Github PK

appsecpipeline

aqueduct

-OFFICIAL REPO - DISA STIG Compliance Automation leveraging Puppet, Ansible, and Bash

arachni

Web Application Security Scanner Framework

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

backtrack-scripts

Custom bash scripts used to automate various pentesting tasks.

bt5-scripts

Scratching my own itches on BackTrack 5

burp-csj

Burp Plugin - Crawljax Selenium JUnit integration

dependencycheck

Dependency-Check is a utility that detects publicly disclosed vulnerabilities in project dependencies.

developer-resources

neo4j developer resources

juice-shop

An intentionally insecure RIA suitable for pen testing and security awareness trainings written in Node, Express and Angular.

kali-linux-docker

Kali Linux Docker

littleproxy

High Performance HTTP Proxy

mitmf

Framework for Man-In-The-Middle attacks

pcc

PHP Secure Configuration Checker

restful-security

My talk from Javazone 2012

resty-burp

REST/JSON interface to Burp Suite

scripts

Scripts I use during pentest engagements.

seclists

SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

spring-mvc-showcase

Demonstrates the features of the Spring MVC web framework

stig

STIG modules for Puppet (originally forked from Fedora Aqueduct)

teammentor-3.0-beta

The TeamMentor version 3.0 beta public repository

threadfix

ThreadFix is a software vulnerability aggregation and management system that helps organizations aggregate vulnerability data, generate virtual patches, and interact with software defect tracking systems.

tools

Operational toolset utilizing git's submodule feature

tplmap

Automatic Server-Side Template Injection Detection and Exploitation Tool

usbdriveby

USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a firewall-evading backdoor, and rerouting DNS within seconds of plugging it in

w3af

Source for the w3af web application attack and audit framework, the open source web vulnerability scanner.

wcf-binary-soap-plug-in

This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).

webgoat

Deliberately insecure JavaEE application