Pinned Repositories
anticsrftokenbypass1
A python script to bypass the anti-csrf token by validating if there is length based validation for the token.
aptos-core
A layer 1 for everyone!
Awesome-DevSecOps-Platforms
A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.
bugbountytools_setup
Bug Bounty Tools Setup Script
CIA-Hacking-Tools
Hacking Tools
Crypto-OpSec-SelfGuard-RoadMap
Here we collect and discuss the best DeFi, Blockchain and crypto-related OpSec researches and data terminals - contributions are welcome.
deepce
Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
Smart-Contract-Audits
Smart Contract security audit reports
Smart-Contract-Security-Audits
Certified Smart Contract Audits for Ethereum, Solana, Near, Cardano, Aptos, Sui, Binance Smart Chain, Fantom, EOS, Tezos by Chainsulting
websecresearch's Repositories
websecresearch/agentic_security
Agentic LLM Vulnerability Scanner
websecresearch/bandit
Bandit is a tool designed to find common security issues in Python code.
websecresearch/Blockchain-dark-forest-selfguard-handbook
Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.
websecresearch/CrimsonEDR
Simulate the behavior of AV/EDR for malware development training.
websecresearch/CSPReconGO
websecresearch/CVE-2024-32002
CVE-2024-32002 RCE PoC
websecresearch/f1rstResponder
f1rstResponder is designed to act as a honeypot for instances of responder running on a network.
websecresearch/fabric
fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
websecresearch/Findomain
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
websecresearch/fuzz.txt
Potentially dangerous files
websecresearch/gungnir
CT Log Scanner
websecresearch/http-garden
Differential testing and fuzzing of HTTP servers and proxies
websecresearch/irene
I AM SHER LOCKED. Dashboard for Appknox Users.
websecresearch/IronSharpPack
IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.
websecresearch/karma_v2
β‘·β πππππ ππΈβ β’Ύ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
websecresearch/knock
Knock Subdomain Scan
websecresearch/nim-shell
Reverse shell that can bypass windows defender detection
websecresearch/nodejsscan
nodejsscan is a static security code scanner for Node.js applications.
websecresearch/OneListForAll
Rockyou for web fuzzing
websecresearch/pentest-book
websecresearch/personal-security-checklist
π A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
websecresearch/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
websecresearch/seal-911
websecresearch/search.0t.rocks
websecresearch/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
websecresearch/subfuz
A subdomain fuzzing tool
websecresearch/svn-extractor
simple script to extract all web resources by means of .SVN folder exposed over network.
websecresearch/ultimate_discovery
Ultimate Wordlist for Web Content Discovery
websecresearch/wordlists
Automated & Manual Wordlists provided by Assetnote
websecresearch/wtfis
Passive hostname, domain and IP lookup tool for non-robots