ryan852-JJJ

ryan852-JJJ's Stars

• hengyoush/kyanos

  Visualize the time packets spend in the kernel, analyze requests/responses in command line.

  Language:C2.7k72

• hatoo/oha

  Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.

  Language:Rust6.7k172

• mitre/caldera

  Automated Adversary Emulation Platform

  Language:Python5.7k1.1k

• pentestfunctions/BlueDucky

  🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

  Language:Python1.3k219

• fr0gger/Awesome-GPT-Agents

  A curated list of GPT agents for cybersecurity

  5.7k632

• PortSwigger/active-scan-plus-plus

  ActiveScan++ Burp Suite Plugin

  Language:Java20945

• vladko312/SSTImap

  Automatic SSTI detection tool with interactive interface

  Language:Python872104

• deepzec/Bad-Pdf

  Steal Net-NTLM Hash using Bad-PDF

  Language:Python1.1k218

• projectdiscovery/interactsh

  An OOB interaction gathering server and client library

  Language:Go3.5k372

• jonaslejon/malicious-pdf

  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

  Language:Python2.9k387

• Endava/cats

  CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

  Language:Java1.2k73

• arainho/awesome-api-security

  A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

  3.1k517

• microsoft/restler-fuzzer

  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

  Language:Python2.6k305

• flipkart-incubator/Astra

  Automated Security Testing For REST API's

  Language:Python2.5k403

• imperva/automatic-api-attack-tool

  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

  Language:Java46192

• RustScan/RustScan

  🤖 The Modern Port Scanner 🤖

  Language:Rust14.9k1k

• DosX-dev/ASM-Guard

  Packer utility for compressing and complicating reversing compiled native code (native files), protecting resources, adding DRM, and packing into an optimized loader.

  2429

• FederatedAI/FATE

  An Industrial Grade Federated Learning Framework

  Language:Python5.7k1.6k

• r0oth3x49/ghauri

  An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

  Language:Python3.2k320

• prowler-cloud/prowler

  Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

  Language:Python10.9k1.6k

• CloudExplorer-Dev/CloudExplorer-Lite

  开源的轻量级云管平台

  Language:Java66693

• h3ll0clar1c3/CRTO

  Certified Red Team Operator

  Language:HTML20061

• elliot-bia/nessus

  nessus crack for docker

  840165

• ccfos/nightingale

  An all-in-one observability solution which aims to combine the advantages of Prometheus and Grafana. It manages alert rules and visualizes metrics, logs, traces in a beautiful web UI.

  Language:Go9.9k1.4k

• apify/crawlee

  Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.

  Language:TypeScript16k696

• API-Security/APIKit

  APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

  Language:Java2k173

• LucasPDiniz/403-Bypass

  Bypass 403 pages

  10114

• assetnote/surf

  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

  Language:Go59942

• projectdiscovery/httpx

  httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

  Language:Go7.8k853

• thewhiteh4t/FinalRecon

  All In One Web Recon

  Language:Python2.3k430