Topic: infosec Goto Github

👇 Here are 1630 public repositories matching this topic...

0xinfection / awesome-waf
infosec,🔥 Web-application firewalls (WAFs) from security standpoint.
User: 0xinfection
waf web-application-firewall firewall awesome-list awesome waf-bypass waf-detection waf-test waf-testing waf-fingerprints

0xsyr0 / awesome-cybersecurity-handbooks
infosec,A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
User: 0xsyr0
ctf cybersecurity infosec pentesting red-teaming capture-the-flag handbooks offensive offensive-security penetration-testing

arainho / awesome-api-security
infosec,A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
User: arainho
api-security api-sec awesome-list api-hacking api-pentest apisec security pentest fuzzing api-hacks

daffainfo / allaboutbugbounty
infosec,All about bug bounty (bypasses, payloads, and etc)
User: daffainfo
bugbounty bugbountytips bypass payloads reconnaissance bug hacking security payload penetration-testing

decalage2 / awesome-security-hardening
infosec,A collection of awesome security hardening guides, tools and other resources
User: decalage2
awesome-list security security-hardening security-tools windows-hardening cybersecurity cyber-security infosec best-practices cis-benchmarks

digininja / dvwa
infosec,Damn Vulnerable Web Application (DVWA)
User: digininja
dvwa php sql-injection security training infosec hacking

dstotijn / hetty
infosec,An HTTP toolkit for security research.
User: dstotijn
Home Page: https://hetty.xyz
mitm proxy http pentesting infosec bugbounty

e-m-b-a / emba
infosec,EMBA - The firmware security analyzer
Organization: e-m-b-a
Home Page: https://www.securefirmware.de
firmware linux embedded-linux security-tools pentesting hacking iot penetration-testing security embedded-systems

edoverflow / bugbounty-cheatsheet
infosec,A list of interesting payloads, tips and tricks for bug bounty hunters.
User: edoverflow
security payloads infosec bugbounty

edoverflow / can-i-take-over-xyz
infosec,"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
User: edoverflow
security infosec bugbounty list subdomain subdomain-takeovers

fabacab / awesome-cybersecurity-blueteam
infosec,:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
User: fabacab
awesome-list cybersecurity blue-team defensive-security security infosec computer-security

ffffffff0x / 1earn
infosec,ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
Organization: ffffffff0x
Home Page: https://home.ffffffff0x.com/
markdown-article linux-learning pentest study security collection blueteam redteam post-penetration ics-security

ffuf / ffuf
infosec,Fast web fuzzer written in Go
Organization: ffuf
fuzzer pentesting infosec web

fr0gger / awesome-gpt-agents
infosec,A curated list of GPT agents for cybersecurity
User: fr0gger
agents cybersecurity infosec llm

gerbenjavado / linkfinder
infosec,A python script that finds endpoints in JavaScript files
User: gerbenjavado
Home Page: https://gerbenjavado.com/discovering-hidden-content-using-linkfinder
infosec endpoints

giuliacassara / awesome-social-engineering
infosec,A curated list of awesome social engineering resources.
User: giuliacassara
social-engineering awesome-list infosec psychology osint

haccer / subjack
infosec,Subdomain Takeover tool written in Go
User: haccer
go golang hostile subdomain takeover subdomain-takeover bug-bounty pentesting infosec bugbounty

ignis-sec / pwdb-public
infosec,A collection of all the data i could extract from 1 billion leaked credentials from internet.
User: ignis-sec
seclists rockyou infosec password

ihebski / defaultcreds-cheat-sheet
infosec,One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
User: ihebski
infosec default-password pentesting bugbounty pentest credentials-gathering cheatsheet cybersecurity blueteam offensive-security

infobyte / faraday
infosec,Open Source Vulnerability Management Platform
Organization: infobyte
Home Page: https://www.faradaysec.com
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management

infosecn1nja / red-teaming-toolkit
infosec,This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
User: infosecn1nja
red-team hacking infosec pentesting

inonshk / 31-days-of-api-security-tips
infosec,This challenge is Inon Shkedy's 31 days API Security Tips.
User: inonshk
pentest api-pentest bug-bounty api-security security bugbountytips bugbounty infosec

integration-it / active-directory-exploitation-cheat-sheet
infosec,A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
User: integration-it
active-directory active-directory-cheatsheet active-directory-exploitation penetration-testing hacking hacking-cheasheet windows-active-directory cheatsheet powershell hacking-tools

jaeles-project / jaeles
infosec,The Swiss Army knife for automated Web Application Testing
Organization: jaeles-project
Home Page: https://jaeles-project.github.io/
golang hacking bugbounty jaeles web-scanner scanner infosec security-tools vulnerabilities

jakejarvis / awesome-shodan-queries
infosec,🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
User: jakejarvis
Home Page: https://jarv.is/notes/shodan-search-queries/
shodan infosec pentesting iot internet-of-things security awesome awesome-list hacking penetration-testing

jassics / security-study-plan
infosec,Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
User: jassics
aws-security study-guide study-plan appsec appsec-tutorials azure-security devsecops-university gcp-security pentesting application-security

kurolabs / stegcloak
infosec,Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
Organization: kurolabs
Home Page: https://stegcloak.surge.sh
cryptography steganography compression functional-programming ramdajs hacking-tool security hacking javascript privacy

liamg / traitor
infosec,:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
User: liamg
gtfobins exploit privesc privilege-escalation hackthebox infosec redteam-tools security-tools cve-2021-3560 dirtypipe

lirantal / awesome-nodejs-security
infosec,Awesome Node.js Security resources
User: lirantal
nodejs security cybersecurity web-security owasp vulnerabilities pentest infosec hacktoberfest

maurosoria / dirsearch
infosec,Web path scanner
User: maurosoria
fuzzer fuzzing python security dirsearch hacking pentesting penetration-testing bug-bounty appsec

maximebeasse / keydecoder
infosec,KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.
User: maximebeasse
duplicate-keys card picture locksmith security-enthusiasts pentesters infosec keydecoder

onlurking / awesome-infosec
infosec, A curated list of awesome infosec courses and training resources.
User: onlurking
infosec pentest courses penetration-testing security-professionals lab awesome security

paulsec / awesome-sec-talks
infosec,A collected list of awesome security talks
User: paulsec
infosec conferences hacking security

pennyw0rth / netexec
infosec,The Network Execution Tool
Organization: pennyw0rth
Home Page: https://netexec.wiki/
hacking pentest pentest-tool pentest-tools pentesting python python3 red-team active-directory infosec

ph055a / osint_collection
infosec,Maintained collection of OSINT related resources. (All Free & Actionable)
User: ph055a
Home Page: https://osint.team
osint research investigation journalism dataset infosec court-search search data-science

pwndoc / pwndoc
infosec,Pentest Report Generator
Organization: pwndoc
Home Page: https://pwndoc.github.io/pwndoc
pentest reporting pentesting-tool reporting-tool security security-tool collaboration audit security-audit penetration-testing

redhuntlabs / awesome-asset-discovery
infosec,List of Awesome Asset Discovery Resources
Organization: redhuntlabs
asset-discovery osint reconnaissance recon infosec awesome-list

rmusser01 / infosec_reference
infosec,An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
User: rmusser01
Home Page: https://rmusser.net/docs
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security

roave / securityadvisories
infosec,:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
Organization: roave
php security-advisories security-vulnerability composer infosec security-vulnerabilities

sa7mon / s3scanner
infosec,Scan for misconfigured S3 buckets across S3-compatible APIs!
User: sa7mon
Home Page: https://github.com/sa7mon/S3Scanner/discussions/135
s3 aws infosec bugbounty s3scanner gcp

samratashok / nishang
infosec,Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
User: samratashok
powershell nishang security red-team penetration-testing infosec hacking redteam activedirectory

skerkour / black-hat-rust
infosec,Applied offensive security with Rust - https://kerkour.com/black-hat-rust
Organization: skerkour
Home Page: https://kerkour.com/black-hat-rust
rust security pentest pentesting offensive-security red-team audit beacon c2 bug-bounty

smicallef / spiderfoot
infosec,SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
User: smicallef
Home Page: http://www.spiderfoot.net
footprinting osint threatintel python infosec intelligence-gathering osint-reconnaissance pentesting threat-intelligence security-tools

snooppr / snoop
infosec,Snoop — инструмент разведки на основе открытых данных (OSINT world)
User: snooppr
Home Page: https://github.com/snooppr/snoop/releases
osint termux username-search username-checker pentest web-scraping ctf scanner redteam blueteam

threat9 / routersploit
infosec,Exploitation Framework for Embedded Devices
Organization: threat9
python security infosec router-exploitation-framework routersploit-framework exploits embedded router routersploit scanner

trickest / cve
infosec,Gather and update all available and newest CVEs with their PoC.
Organization: trickest
Home Page: https://trickest.com
poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security

ullaakut / cameradar
infosec,Cameradar hacks its way into RTSP videosurveillance cameras
User: ullaakut
penetration-testing security hacking infosec rtsp cctv cameras hacking-tool pentesting security-tools

wazuh / wazuh
infosec,Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Organization: wazuh
Home Page: https://wazuh.com/
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security

yogeshojha / rengine
infosec,reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
User: yogeshojha
Home Page: https://yogeshojha.github.io/rengine/
security-tools osint recon recon-engine reconnaissance scanner scanner-web rengine information-gathering bugbounty

ysrc / xunfeng
infosec,巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
Organization: ysrc
security pentesting infosec exploits security-audit vulnerability-detection scanner vulnerability-assessment vulnerability-scanners