RogerKillam

RogerKillam's Stars

• hashcat/hashcat

  World's fastest and most advanced password recovery utility

  Language:C21.2k2.9k

• wallarm/jwt-secrets

  728165

• vysecurity/DomLink

  A tool to link a domain with registered organisation names and emails, to other domains.

  Language:Python830142

• EdOverflow/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  Language:Python4.8k715

• unit-mesh/auto-dev

  🧙‍AutoDev: The AI-powered coding wizard（AI 驱动编程助手）with multilingual support 🌐, auto code generation 🏗️, and a helpful bug-slaying assistant 🐞! Customizable prompts 🎨 and a magic Auto Dev/Testing/Document/Agent feature 🧪 included! 🚀

  Language:Kotlin2.8k318

• klaxit/hidden-secrets-gradle-plugin

  🔒 Deeply hide secrets on Android

  Language:Kotlin39540

• PortSwigger/BChecks

  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  628112

• Azure-Samples/eShopOnAzure

  A variant of https://github.com/dotnet/eShop that uses Azure services

  Language:C#164100

• dotnet/eShop

  A reference .NET application implementing an eCommerce site

  Language:C#6.2k1.8k

• dotnet-architecture/eShopOnWeb

  Sample ASP.NET Core 8.0 reference application, powered by Microsoft, demonstrating a layered application architecture with monolithic deployment model. Download the eBook PDF from docs folder.

  Language:C#10.2k5.5k

• smicallef/spiderfoot

  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

  Language:Python13k2.3k

• rastating/dnmasscan

  A script that can resolve an input file of domains and scan them with masscan

  Language:Shell15542

• robertdavidgraham/masscan

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

  Language:C23.6k3.1k

• incogbyte/shosubgo

  Small tool to Grab subdomains using Shodan api.

  Language:Go35445

• Tounsi007/github-search

  Language:JavaScript11

• bsqrl/juice-shop-walkthrough

  Complete solution for intentionally vulnerable webshop: "Juice Shop"

  7022

• cisagov/RedEye

  RedEye is a visual analytic tool supporting Red & Blue Team operations

  Language:TypeScript2.7k271

• cisagov/cyber.dhs.gov

  A site for CISA directives

  Language:SCSS15761

• mattnotmax/cyberchef-recipes

  A list of cyber-chef recipes and curated links

  2k255

• DefectDojo/django-DefectDojo

  DevSecOps, ASPM, Vulnerability Management. All on one platform.

  Language:HTML3.7k1.6k

• onhexgroup/Conferences

  Conference presentation slides

  1.5k242

• projectdiscovery/dnsx

  dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

  Language:Go2.2k242

• samhaxr/TakeOver-v1

  Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdomain takeover vulnerability.

  Language:Shell10129

• dionach/HeadersAnalyzer

  Burp extension that checks for interesting and security headers

  Language:Python4220

• cisagov/ScubaGear

  Automation to assess the state of your M365 tenant against CISA's baselines

  Language:PowerShell1.6k221

• Azure/Azure-Network-Security

  Resources for improving Customer Experience with Azure Network Security

  Language:Python790306

• cisagov/untitledgoosetool

  Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

  Language:Python91380

• PortSwigger/serialization-examples

  Language:Java3917

• Azure/FTALive-Sessions

  This repository is a public-facing source of information for FastTrack for Azure Live sessions.

  Language:Jupyter Notebook151118

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.7k1.8k