elkhvn's Stars
google/google-ctf
Google CTF
snyk/cli
Snyk CLI scans and monitors your projects for security vulnerabilities.
ChiChou/grapefruit
(WIP) Runtime Application Instruments for iOS. Previously Passionfruit
prateek147/DVIA-v2
Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.
sensepost/objection
📱 objection - runtime mobile exploration
frida/frida
Clone this repo to build Frida
MobSF/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
dub-flow/secure-code-review-challenges
This repo contains the code for my secure code review challenges
vimeo/psalm
A static analysis tool for finding errors in PHP applications
webpwnized/mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
RedSiege/EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
d78ui98/APKDeepLens
Android security insights in full spectrum.
theowni/Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.
antonioCoco/ConPtyShell
ConPtyShell - Fully Interactive Reverse Shell for Windows
bregman-arie/devops-exercises
Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions
madhuakula/kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
hashicorp/vault
A tool for secrets management, encryption as a service, and privileged access management
astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
RhinoSecurityLabs/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
aquasecurity/tfsec
Tfsec is now part of Trivy
nccgroup/sadcloud
A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
HavocFramework/Havoc
The Havoc Framework.
andresriancho/enumerate-iam
Enumerate the permissions associated with AWS credential set
NetSPI/aws_consoler
A utility to convert your AWS CLI credentials into AWS console access.
Infisical/infisical
♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
analysis-tools-dev/static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
DefectDojo/django-DefectDojo
DevSecOps, ASPM, Vulnerability Management. All on one platform.
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
tenable/terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
jassics/awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security