Pinned Repositories
apisecurityinaction
Source code that accompanies the book API Security in Action
awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
Awesome-CV
:page_facing_up: Awesome CV is LaTeX template for your outstanding job application
awesome-vulnerable
A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
breaking-and-pwning-apps-and-servers-aws-azure-training
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
colly
Elegant Scraper and Crawler Framework for Golang
DeathStar
Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
docker-mod_auth_mellon
Dockerfiles for Mod_auth_mellon
dotfiles-1
There is no place like ~/
FreeBSD-Rootkit-1
A FreeBSD Kernel Rootkit written in C and Golang
elliottl's Repositories
elliottl/apisecurityinaction
Source code that accompanies the book API Security in Action
elliottl/awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
elliottl/awesome-vulnerable
A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
elliottl/breaking-and-pwning-apps-and-servers-aws-azure-training
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
elliottl/colly
Elegant Scraper and Crawler Framework for Golang
elliottl/dvna
Damn Vulnerable NodeJS Application
elliottl/evildork
Evildork targeting your fiancee👁️
elliottl/fakerjs
Generate massive amounts of fake data in the browser and node.js
elliottl/Generic-University
Vulnerable API
elliottl/go_snippets
random go code
elliottl/grover
A Ruby gem to transform HTML into PDFs, PNGs or JPEGs using Google Puppeteer/Chromium
elliottl/hackerone-reports
Top disclosed reports from HackerOne
elliottl/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
elliottl/hacktricks-cloud
elliottl/hydra
OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.
elliottl/kratos
Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, profile management, identity schemas, social sign in, registration, account recovery, and IoT auth. Golang, headless, API-only - without templating or theming headaches.
elliottl/mech
Download media or send API requests
elliottl/Oh365UserFinder
Python3 o365 User Enumeration Tool
elliottl/P4wnP1_aloa
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
elliottl/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
elliottl/phoneinfoga
Information gathering & OSINT framework for phone numbers
elliottl/PurplePanda
Identify privilege escalation paths within and across different clouds
elliottl/rose-pine_neovim
Soho vibes for Neovim
elliottl/samples-golang
samples-golang
elliottl/sherlock
🔎 Hunt down social media accounts by username across social networks
elliottl/social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
elliottl/TorBot
Dark Web OSINT Tool
elliottl/VAmPI
Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
elliottl/vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
elliottl/vulnerable-node
A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools