CiCiNL

CiCiNL's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python60k1.8k014.5k

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go11.8k2106461.9k

• juice-shop/juice-shop

  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  Language:TypeScript10.1k16281810.4k

• soxoj/maigret

  🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

  Language:Python10.1k901.2k788

• BloodHoundAD/BloodHound

  Six Degrees of Domain Admin

  Language:PowerShell9.7k3765091.7k

• offensive-security/exploitdb

  The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

  7.7k738951.9k

• weaveworks/scope

  Monitoring, visualisation & management for Docker & Kubernetes

  Language:Go5.8k1541.8k708

• astrada/google-drive-ocamlfuse

  FUSE filesystem over Google Drive

  Language:OCaml5.5k147857351

• 0x4D31/awesome-threat-detection

  ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

  3.6k1906636

• NCSC-NL/log4shell

  Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

  Language:Python1.9k6998606

• dolevf/Damn-Vulnerable-GraphQL-Application

  Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

  Language:JavaScript1.5k2732293

• OWASP/wrongsecrets

  Vulnerable app with examples showing how to not use secrets

  Language:Java1.2k18235337

• OWASP/crAPI

  completely ridiculous API (crAPI)

  Language:Java1.1k2499334

• erev0s/VAmPI

  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

  Language:Python8921123346

• snoopysecurity/dvws-node

  Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

  Language:JavaScript4421137173

• vectra-ai-research/MAAD-AF

  MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

  Language:PowerShell35013452

• op7ic/EDR-Testing-Script

  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

  Language:Batchfile28720178

• DevSlop/Pixi

  The Pixi module is a MEAN Stack web app with wildly insecure APIs!

  Language:JavaScript1105580

• ivision-research/vulnerable-graphql-api

  A very vulnerable implementation of a GraphQL API.

  Language:TypeScript567229

• ne0z/DamnVulnerableMicroServices

  This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)

  Language:JavaScript392221

• tkisason/vulnapi

  Intentionaly very vulnerable API with bonus bad coding practices

  Language:Python365321

• vectranetworks/vectra_api_tools

  Community driven python library, scripts, and other utilities for interacting with the Vectra API

  Language:Python2914319

• tesorion/TCERT-Cumulonimbus-UAL_Extractor

  Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a Microsoft 365 environment.

  Language:PowerShell173

• layro01/node-api-goat

  A simple Node.js Express REST app with some OWASP vulnerabilities.

  Language:JavaScript152522

• tesorion/TCERT-Tesorion_Vulnerability_Explorer

  Language:Python101192

• forensic-security/cybereason

  Async Cybereason API client

  Language:Python6211

• jfmatth/DjangoOnKubernetes

  Putting a basic Django application on Kubernetes via Helm

  Language:Python5212

• guardicode/centra-py-client

  A Python client for Guardicore Centra API access.

  Language:Python42

• filipi86/awesome-python

  A curated list of awesome Python frameworks, libraries, software and resources

  Language:Python200

• psmiraglia/python-cybereason

  Command line interface to interact with Cybereason via API

  Language:Python1301