xep624

xep624's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python59.4k1.8k014.4k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP56.5k1.9k26223.7k

• OWASP/owasp-mastg

  The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

  Language:Python11.6k4231.1k2.3k

• prowler-cloud/prowler

  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

  Language:Python10.5k1288951.5k

• toniblyx/my-arsenal-of-aws-security-tools

  List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

  Language:Shell8.9k394331.5k

• RhinoSecurityLabs/pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Language:Python4.3k109127683

• GerbenJavado/LinkFinder

  A python script that finds endpoints in JavaScript files

  Language:Python3.6k6581585

• RhinoSecurityLabs/cloudgoat

  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

  Language:Python2.9k74106594

• widdix/aws-cf-templates

  Free Templates for AWS CloudFormation

  Language:Java2.7k1181901.4k

• SecurityFTW/cs-suite

  Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

  Language:Shell1.1k6249216

• kgretzky/evilginx

  PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

  Language:Python1.1k8595260

• securing/DumpsterDiver

  Tool to search secrets in various filetypes.

  Language:Python9693113151

• m6a-UdS/dvca

  Damn Vulnerable Cloud Application

  Language:CSS1819146

• owasp-cloud-security/owasp-cloud-security

  OWASP Cloud Security - Enabling conversations through threat and control stories

  Language:Gherkin175379923

• andresriancho/vpc-vpn-pivot

  Pivot into private VPC networks using a VPN connection

  Language:Python40349

• RhinoSecurityLabs/Presentations

  A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.

  37705

• securing/eth-rd-messenger

  Ethereum Responsible Disclosure Messenger

  Language:JavaScript4503

• damianrusinek/eth-messenger-py

  Ethereum Responsible Disclosure messenger in Python.

  Language:Python3201