security-testing

Scalable Automated Adversary Emulation Platform

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

🎯 Command Injection Payload List

Awesome Python Security resources 🕶🐍🔐

Hacking Toolkit

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Web application vulnerability scanner

🔎 shodansploit > v1.3.0

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

Awesome .NET Security Resources

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

🎯 HackerTarget ToolKit - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery 🎯

A friendly car security exploration tool for the CAN bus

NERVE Continuous Vulnerability Scanner

PHP Security Check List [ EN ] 🌋 ☣️

Fuzz your Rust code with Google-developed Honggfuzz !

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

Awesome Java Security Resources 🕶☕🔐

memory search and patch tool on debuggable apk without root & ndk

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Metasploit Cheat Sheet 💣

用cel-go重现了长亭xray的poc检测功能的轮子

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

Custom memory allocator that helps discover reads from uninitialized memory

Red Team Attack Lab for TTP testing & research

WireBug is a toolset for Voice-over-IP penetration testing

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.