Pinned Repositories
0wned
Code execution via Python package installation.
AD-Attack-Defense
Active Directory Security For Red & Blue Team
advisories
AndroidInterview-Q-A
The top Internet companies android interview questions and answers
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
awesome-appsec
A curated list of resources for learning about application security
Bella
A pure python, post-exploitation, data mining tool and remote administration tool for macOS.
Docker-Secure-Deployment-Guidelines
Deployment checklist for securely deploying Docker
MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
public-pentesting-reports
Curated list of public penetration testing reports released by several consulting firms
0x13337's Repositories
0x13337/appsec-education
Presentations, training modules, and other education materials from Duo Security's Application Security team.
0x13337/attacking-and-auditing-docker-containers-and-kubernetes-clusters
Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters
0x13337/attacking-cloudgoat2
A step-by-step walkthrough of CloudGoat 2.0 scenarios.
0x13337/BugId
Detect, analyze and uniquely identify crashes in Windows applications
0x13337/chain-of-fools
A set of tools that allow researchers to experiment with certificate chain validation issues
0x13337/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
0x13337/cloudtracker
CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
0x13337/CNVD-2020-10487-Tomcat-ajp-POC
CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc
0x13337/CorelanTraining
Script(s) to assist with the setup of WinDBG & mona.py on a Windows 10 VM
0x13337/CVE-2019-11708
Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
0x13337/CVE-2020-2551
Weblogic RCE with IIOP
0x13337/diaphora
Diaphora, the most advanced Free and Open Source program diffing tool.
0x13337/dlint
Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.
0x13337/docker-ssllabs-scan
Qualys sslabs-scan utility in a tiny docker image
0x13337/kubernetes-rbac-audit
Tool for auditing RBACs in Kubernetes
0x13337/LKWA
Lesser Known Web Attack Lab
0x13337/LOLBAS-1
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
0x13337/my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
0x13337/phuip-fpizdam
Exploit for CVE-2019-11043
0x13337/REPL
The Learning Hub for UoL's Online CS Students
0x13337/ReverseTCPShell
PowerShell ReverseTCP Shell - Framework
0x13337/SCShell
Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
0x13337/secret-bridge
Monitors Github for leaked secrets
0x13337/SSRFTest
SSRF testing tool
0x13337/Stormspotter
Azure Red Team tool for graphing Azure and Azure Active Directory objects
0x13337/truffleHog
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
0x13337/user-microservice-docker-architecture-example
Docker microservice architecture for user services
0x13337/vmware_vcenter_cve_2020_3952
Exploit for CVE-2020-3952 in vCenter 6.7
0x13337/WebGoat
WebGoat 8.0
0x13337/windbg-scripts
A bunch of JavaScript extensions for WinDbg.