manuel-sommer

manuel-sommer's Stars

• Z4nzu/hackingtool

  ALL IN ONE Hacking Tool For Hackers

  Language:Python51.2k1.2k3595.5k

• aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Language:Go24.2k1712.7k2.4k

• enaqx/awesome-pentest

  A collection of awesome penetration testing resources, tools and other shiny things

  22.2k1.2k394.5k

• hadolint/hadolint

  Dockerfile linter, validate inline bash, written in Haskell

  Language:Haskell10.6k69612420

• anchore/grype

  A vulnerability scanner for container images and filesystems

  Language:Go9.1k78911591

• github/codeql

  CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

  Language:CodeQL7.9k2392.3k1.6k

• nccgroup/ScoutSuite

  Multi-Cloud Security Auditing Tool

  Language:Python6.8k1398811.1k

• payloadbox/xss-payload-list

  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  6.5k139131.7k

• vimeo/psalm

  A static analysis tool for finding errors in PHP applications

  Language:PHP5.6k627.6k666

• OWASP/Nettacker

  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  Language:Python3.7k113227801

• swisskyrepo/SSRFmap

  Automatic SSRF fuzzer and exploitation tool

  Language:Python3k5524531

• anouarbensaad/vulnx

  vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

  Language:Python1.9k5359344

• trimstray/sandmap

  Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

  Language:Shell1.6k4267216

• IvanGlinkin/Fast-Google-Dorks-Scan

  The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

  Language:Shell1.5k369248

• erev0s/VAmPI

  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

  Language:Python9391225375

• bridgecrewio/yor

  Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

  Language:Go83817112124

• faizann24/XssPy

  XssPy - Web Application XSS Scanner

  Language:Python8356322218

• dwisiswant0/findom-xss

  A fast DOM based XSS vulnerability scanner with simplicity.

  Language:Shell7762610111

• Threagile/threagile

  Agile Threat Modeling Toolkit

  Language:Go6343350128

• LewisArdern/bXSS

  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

  Language:JavaScript521142665

• snoopysecurity/dvws-node

  Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

  Language:JavaScript4591137178

• stefanoj3/dirstalk

  Modern alternative to dirbuster/dirb

  Language:Go377112848

• woj-ciech/LeakLooker-X

  LeakLooker GUI - Discover, browse and monitor database/source code leaks

  Language:JavaScript281151154

• merttasci/csrf-poc-generator

  this html file creates a csrf poc form to any http request.

  Language:JavaScript26951102

• globaldatanet/aws-firewall-factory

  Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.

  Language:TypeScript23774422

• MaibornWolff/SecObserve

  SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.

  Language:Python1095219

• MaibornWolff/dd-import

  A utility to (re-)import findings and language data into DefectDojo

  Language:Python424724

• Fadavvi/Yara-Repo

  A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

  Language:Shell26383

• mesutgungor/server-security

  Linux Server Security Hardening Bookmarks

  5204

• Pratyaksh06/SVGXSS

  This repo contains SVG file which has xss payload in it.

  Language:HTML1102