security-testing

Automated Adversary Emulation Platform

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

🎯 Command Injection Payload List

Awesome Python Security resources 🕶🐍🔐

Hacking Toolkit

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Web application vulnerability scanner

Awesome .NET Security Resources

🔎 shodansploit > v1.3.0

A friendly car security exploration tool for the CAN bus

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

🎯 HackerTarget ToolKit - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery 🎯

NERVE Continuous Vulnerability Scanner

Fuzz your Rust code with Google-developed Honggfuzz !

PHP Security Check List [ EN ] 🌋 ☣️

memory search and patch tool on debuggable apk without root & ndk

Awesome Java Security Resources 🕶☕🔐

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

Metasploit Cheat Sheet 💣

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Red Team Attack Lab for TTP testing & research

用cel-go重现了长亭xray的poc检测功能的轮子

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

Custom memory allocator that helps discover reads from uninitialized memory

WireBug is a toolset for Voice-over-IP penetration testing

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.