elkhvn

elkhvn's Stars

• Lissy93/web-check

  🕵️‍♂️ All-in-one OSINT tool for analysing any website

  Language:TypeScript20.9k1.6k

• pwntester/ysoserial.net

  Deserialization payload generator for a variety of .NET formatters

  Language:C#3.1k461

• iphelix/dnschef

  DNSChef - DNS proxy for Penetration Testers and Malware Analysts

  Language:Python868206

• NickstaDB/DeserLab

  Java deserialization exploitation lab.

  Language:Java23450

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.5k1.7k

• hahwul/DevSecOps

  ♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

  Language:Go1.7k340

• CyberSecurityUP/eWPTX-Preparation

  31665

• evilcos/xss.swf

  a tiny tool for swf hacking, just browse it:)

  23589

• google/closure-compiler

  A JavaScript checker and optimizer.

  Language:Java7.3k1.1k

• anchore/grype

  A vulnerability scanner for container images and filesystems

  Language:Go8.2k531

• zaproxy/zaproxy

  The ZAP core project

  Language:Java12.3k2.2k

• mgreiler/code-review-checklist

  This code review checklist helps you be a more effective and efficient code reviewer.

  863166

• wireghoul/graudit

  grep rough audit - source code auditing tool

  Language:Shell1.5k238

• OWASP/www-project-developer-guide

  OWASP Project Developer Guide - Document and Project Web pages

  Language:HTML6313

• juice-shop/juice-shop

  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  Language:TypeScript9.9k9.9k

• RetireJS/retire.js

  scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

  Language:JavaScript3.6k412

• pyupio/safety

  Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

  Language:Python1.7k141

• google/google-ctf

  Google CTF

  Language:Python4.4k554

• snyk/cli

  Snyk CLI scans and monitors your projects for security vulnerabilities.

  Language:TypeScript4.8k543

• ChiChou/grapefruit

  (WIP) Runtime Application Instruments for iOS. Previously Passionfruit

  Language:Vue77573

• prateek147/DVIA-v2

  Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

  Language:Swift846175

• sensepost/objection

  📱 objection - runtime mobile exploration

  Language:Python7.2k829

• frida/frida

  Clone this repo to build Frida

  Language:Meson15.3k1.6k

• MobSF/Mobile-Security-Framework-MobSF

  Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  Language:JavaScript16.7k3.2k

• dub-flow/appsec-challenges

  This repo contains the code for my appsec challenges

  Language:Java4111

• vimeo/psalm

  A static analysis tool for finding errors in PHP applications

  Language:PHP5.5k654

• webpwnized/mutillidae

  OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

  Language:PHP1.2k400

• RedSiege/EyeWitness

  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

  Language:Python4.8k832

• d78ui98/APKDeepLens

  Android security insights in full spectrum.

  Language:Python44452

• theowni/Damn-Vulnerable-RESTaurant-API-Game

  Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

  Language:Python39656