augustd's Stars
awslabs/git-secrets
Prevents you from committing secrets and credentials into git repositories
GTFOBins/GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
offensive-security/exploitdb
The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb
GreyDGL/PentestGPT
A GPT-empowered penetration testing tool
joelittlejohn/jsonschema2pojo
Generate Java types from JSON or JSON Schema and annotate those types for data-binding with Jackson, Gson, etc
s0md3v/AwesomeXSS
Awesome XSS stuff
jindrapetrik/jpexs-decompiler
JPEXS Free Flash Decompiler
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
darkoperator/dnsrecon
DNS Enumeration Script
gracenolan/Notes
Netflix-Skunkworks/stethoscope
Personalized, user-focused recommendations for employee information security.
salesforce/cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
brannondorsey/PassGAN
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
tc39/proposal-shadowrealm
ECMAScript Proposal, specs, and reference implementation for Realms
swisskyrepo/GraphQLmap
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
hakluke/weaponised-XSS-payloads
XSS payloads designed to turn alert(1) into P1
java-diff-utils/java-diff-utils
Diff Utils library is an OpenSource library for performing the comparison / diff operations between texts or some kind of data: computing diffs, applying patches, generating unified diffs or parsing them, generating diff output for easy future displaying (like side-by-side view) and so on.
httpvoid/writeups
netaddr/netaddr
A network address manipulation library for Python
dirkjanm/adconnectdump
Dump Azure AD Connect credentials for Azure AD and Active Directory
wisec/domxsswiki
Automatically exported from code.google.com/p/domxsswiki
rarecoil/pantagrule
large hashcat rulesets generated from real-world compromised passwords
h3xstream/burp-retire-js
Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
DavidDikker/endgame
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈
twaugh/patchutils
Manipulate patch files
RUB-NDS/PDF101
Artifacts for the Black Hat talk.
thombergs/diffparser
Parse unified diffs with Java.
spoofzu/jvmxray
Externalize Java application access to protected resources as log messages.
gursev/Oyedata
Oyedata is a tool to perform OData assessments
rarecoil/GraphQLmap
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.