sbehrens

sbehrens's Stars

• CoatiSoftware/Sourcetrail

  Sourcetrail - free and open-source interactive source explorer

  Language:C++15k3081k1.4k

• semgrep/semgrep

  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

  Language:OCaml10.9k1053k641

• n1nj4sec/pupy

  Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

  Language:Python8.5k47001.8k

• ticarpi/jwt_tool

  :snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

  Language:Python5.5k6481684

• build-trust/ockam

  Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

  Language:Rust4.5k581.8k561

• bluscreenofjeff/Red-Team-Infrastructure-Wiki

  Wiki to collect Red Team infrastructure hardening resources

  4.2k2117904

• its-a-feature/Mythic

  A collaborative, multi-platform, red teaming framework

  Language:JavaScript3.4k68242435

• GrrrDog/Java-Deserialization-Cheat-Sheet

  The cheat sheet about Java Deserialization vulnerabilities

  3k1389596

• giuliacassara/awesome-social-engineering

  A curated list of awesome social engineering resources.

  2.8k1099389

• ajinabraham/nodejsscan

  nodejsscan is a static security code scanner for Node.js applications.

  Language:CSS2.4k5887330

• approximatelabs/sketch

  AI code-writing assistant that understands data content

  Language:Python2.2k2126119

• greshake/llm-security

  New ways of breaking app-integrated LLMs

  Language:Jupyter Notebook1.9k346124

• doyensec/inql

  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

  Language:Python1.6k29106161

• hysnsec/awesome-threat-modelling

  A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

  Language:Dockerfile1.4k685263

• SecurityRiskAdvisors/VECTR

  VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

  1.4k70277165

• disclose/diodb

  Open-source vulnerability disclosure and bug bounty program database

  Language:Python9887872319

• doyensec/regexploit

  Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

  Language:Python796131754

• vysecurity/DomainFrontingLists

  A list of Domain Frontable Domains by CDN

  56829399

• prompt-security/ps-fuzz

  Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt

  Language:Python428101657

• nevalla/lens-resource-map-extension

  Lens - The Kubernetes IDE extension that displays Kubernetes resources and their relations as a force graph.

  Language:TypeScript39292425

• JupiterOne/starbase

  Graph-based security analysis for everyone

  Language:TypeScript338202734

• devoteam-cybertrust/burpcollaborator-docker

  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.

  Language:Python281111042

• projectdiscovery/pd-actions

  Continuous recon and vulnerability assessment using Github Actions.

  20455

• mandatoryprogrammer/tarnish

  A Chrome extension static analysis tool to help aide in security reviews.

  Language:JavaScript1508325

• armenak/DataDefender

  Sensitive Data Management: Data Discovery and Anonymization toolkit

  Language:Java1482110355

• GoogleChrome/CertificateTransparency

  Language:HTML148512764

• MythicAgents/poseidon

  Poseidon is a Golang agent targeting Linux and macOS

  Language:Go12792433

• mbechler/serjs

  A Java serializer in JavaScript

  Language:HTML82708

• dmaasland/mcfridafee

  Language:Python523113

• Veridax/privapi

  Detect Sensitive REST API communication using Deep Neural Networks

  Language:Python468013