async-costelo's Stars
RustScan/RustScan
🤖 The Modern Port Scanner 🤖
andresriancho/enumerate-iam
Enumerate the permissions associated with AWS credential set
skylot/jadx
Dex to Java decompiler
arslanbilal/git-cheat-sheet
:octocat: git and git flow cheat sheet
Ignitetechnologies/Mindmap
This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them
analysis-tools-dev/static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
topjohnwu/Magisk
The Magic Mask for Android
noraj/OSCP-Exam-Report-Template-Markdown
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
iBotPeaches/Apktool
A tool for reverse engineering Android apk files
MobSF/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
tmux/tmux
tmux source code
APKLab/APKLab
Android Reverse-Engineering Workbench for VS Code
ytdl-org/youtube-dl
Command-line program to download videos from YouTube.com and other video sites
ansible/ansible
Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
SecurityInnovation/AuthMatrix
AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
0xInfection/Awesome-WAF
🔥 Web-application firewalls (WAFs) from security standpoint.
sigalor/whatsapp-web-reveng
Reverse engineering WhatsApp Web.
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
Karanxa/Bug-Bounty-Wordlists
A repository that includes all the important wordlists used while bug hunting.
ffuf/ffuf
Fast web fuzzer written in Go
hunterluker/eJPT-notes
📕 My collection of notes for the eJPT certification.
gnebbia/hydra_notes
Some notes about Hydra for bruteforcing
juliocesarfort/public-pentesting-reports
A list of public penetration test reports published by several consulting firms and academic security groups.
ohmyzsh/ohmyzsh
🙃 A delightful community-driven (with 2,300+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.
OWASP/Top10
Official OWASP Top 10 Document Repository
shieldfy/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
Shiva108/CTF-notes
Everything needed for doing CTFs
Genymobile/scrcpy
Display and control your Android device