Rets66

Rets66's Stars

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP58.6k1.9k26823.9k

• nektos/act

  Run your GitHub Actions locally 🚀

  Language:Go55.4k1651.2k1.4k

• opentofu/opentofu

  OpenTofu lets you declaratively manage your cloud infrastructure.

  Language:Go23.3k120998897

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go12.7k1605211.3k

• maurosoria/dirsearch

  Web path scanner

  Language:Python12.2k3085472.3k

• OJ/gobuster

  Directory/File, DNS and VHost busting tool written in Go

  Language:Go10.1k1572861.2k

• HackTricks-wiki/hacktricks

  Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

  Language:Python9k234922.7k

• OWASP/wstg

  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  Language:Dockerfile7.3k3383461.3k

• nccgroup/ScoutSuite

  Multi-Cloud Security Auditing Tool

  Language:Python6.7k1378751.1k

• xmendez/wfuzz

  Web application fuzzer

  Language:Python6k1671991.4k

• DominicBreuker/pspy

  Monitor linux processes without root permissions

  Language:Go5k5212512

• GhostPack/Rubeus

  Trying to tame the three-headed dog.

  Language:C#4.1k8476780

• assetnote/kiterunner

  Contextual Content Discovery Tool

  Language:Go2.7k4048297

• aws-actions/configure-aws-credentials

  Configure AWS credential environment variables for use in other GitHub Actions.

  Language:TypeScript2.5k54264473

• bigb0sss/RedTeam-OffensiveSecurity

  Tools & Interesting Things for RedTeam Ops

  Language:Python2.1k600362

• skills/secure-code-game

  A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

  Language:Python2.1k1826218

• mozilla/cipherscan

  A very simple way to find out which SSL ciphersuites are supported by a target.

  Language:Python2k10577266

• sysdream/ligolo

  Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

  Language:Go1.7k3710223

• doyensec/inql

  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

  Language:Python1.5k29106158

• dolevf/Damn-Vulnerable-GraphQL-Application

  Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

  Language:JavaScript1.5k2732298

• iknowjason/Awesome-CloudSec-Labs

  Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

  1.4k243194

• pushsecurity/saas-attacks

  Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

  1.2k233983

• roottusk/vapi

  vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

  Language:HTML1.2k1927307

• nccgroup/singularity

  A DNS rebinding attack framework.

  Language:JavaScript1k3335138

• rverton/webanalyze

  Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

  Language:Go9761453139

• 3nock/SpiderSuite

  Advance web security spider/crawler

  60410765

• OWASP/OFFAT

  The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

  Language:Python456132066

• google/csp-evaluator

  Language:TypeScript329153446

• step-security/wait-for-secrets

  Publish from GitHub Actions using multi-factor authentication

  Language:TypeScript27531318

• OWASP/www-project-top-10-ci-cd-security-risks

  OWASP Foundation Web Respository

  Language:HTML7920324