nutmag Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

androidmalware_2019

Popular Android threats in 2019

ansible-for-devops

Ansible examples from Ansible for DevOps.

ansible-for-kubernetes

Ansible and Kubernetes examples from Ansible for Kubernetes Book

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

bug-bounty-toolz

BBT - Bug Bounty Tools

burp-jq

Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cloudquery

cloudquery transforms your cloud infrastructure into queryable SQL tables for easy monitoring, governance and security.

devsecops

django.nv

dvja

Damn Vulnerable Java (EE) Application

fuzzbench

FuzzBench - Fuzzer benchmarking as a service.

gb-schematics

Game Boy -related schematics

honeytrap

Advanced Honeypot framework.

kubiscan

A tool to scan Kubernetes cluster for risky permissions

lazyweb

This web application is a demonstration of common server-side application flaws. Each of the vulnerabilities has its own difficulty rating.

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

openedr

Open EDR public repository

pinkpanther

Windows x64 handcrafted token stealing kernel-mode shellcode

pret

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

sampler

Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

slipstream

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website

vulpy

Vulnerable Python Application To Learn Secure Development

watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

webapp

Sample Web App with Maven for Jenkins Demo