elliottl

elliottl's Stars

• securifybv/Visual-Studio-BOF-template

  A Visual Studio template used to create Cobalt Strike BOFs

  Language:C28253

• UberGuidoZ/Flipper

  Playground (and dump) of stuff I make or modify for the Flipper Zero

  Language:C13.8k3.2k

• cr0hn/vulnerable-node

  A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

  Language:JavaScript447670

• z0m31en7/deauthalyzer

  Deauthalyzer is a script designed to monitor WiFi networks and detect deauthentication attacks. It utilizes packet sniffing and analysis techniques to identify deauthentication attack packets and provide relevant information about the attack.

  Language:Python425

• appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training

  Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

  Language:CSS925257

• ajinabraham/nodejsscan

  nodejsscan is a static security code scanner for Node.js applications.

  Language:CSS2.4k327

• nodejs/security-wg

  Node.js Ecosystem Security Working Group

  Language:JavaScript498121

• NightRang3r/P4wnP1-A.L.O.A.-Payloads

  payloads for P4wnP1 A.L.O.A

  Language:Python31854

• I-Am-Jakoby/PowerShell-for-Hackers

  This repository is a collection of powershell functions every hacker should know

  Language:PowerShell1.1k128

• logickworkshop/Flipper-IRDB

  A collective of different IRs for the Flipper

  2.1k312

• ory/hydra

  The most scalable and customizable OpenID Certified™ OpenID Connect and OAuth Provider on the market. Become an OpenID Connect and OAuth2 Provider over night. Broad support for related RFCs. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

  Language:Go15.6k1.5k

• flipkart-incubator/Astra

  Automated Security Testing For REST API's

  Language:Python2.5k401

• arainho/awesome-api-security

  A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

  3k510

• roottusk/vapi

  vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

  Language:HTML1.2k303

• InsiderPhD/Generic-University

  Vulnerable API

  Language:PHP384102

• PortSwigger/log-requests-to-sqlite

  BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

  Language:Java122

• PortSwigger/oauth-scan

  Burp Suite Extension useful to verify OAUTHv2 and OpenID security

  Language:Java1835

• Cyber-Guy1/API-SecurityEmpire

  API Security Project aims to present unique attack & defense methods in API Security field

  1.3k245

• yosriady/awesome-api-devtools

  :books: A collection of useful resources for building RESTful HTTP+JSON APIs.

  3.8k524

• rose-pine/startpage

  Soho vibes for Startpage

  Language:HTML2613

• Ne0nd0g/merlin

  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

  Language:Go5.1k801

• web3coach/the-blockchain-bar

  The source-code for: "Build a Blockchain from Scratch in Go" eBook.

  Language:Go499184

• FDlucifer/Proxy-Attackchain

  Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)

  Language:C#509104

• simplesamlphp/SAML-tracer

  Browser extension for examining SAML messages

  Language:JavaScript14239

• crewjam/saml

  SAML library for go

  Language:Go969435

• Tikam02/Web3.0_Vault

  A Vault for Web3.0 Resources

  4911

• SimonWaldherr/golibs

  general purpose Golang code (to be included in other projects)

  Language:Go12217

• safebuffer/vulnerable-AD

  Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

  Language:PowerShell2k388

• byt3bl33d3r/DeathStar

  Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

  Language:Python1.6k329

• byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks

  Language:Python8.4k1.6k