xep624's Stars
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
OWASP/owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
prowler-cloud/prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
toniblyx/my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
GerbenJavado/LinkFinder
A python script that finds endpoints in JavaScript files
RhinoSecurityLabs/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
widdix/aws-cf-templates
Free Templates for AWS CloudFormation
SecurityFTW/cs-suite
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
kgretzky/evilginx
PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
securing/DumpsterDiver
Tool to search secrets in various filetypes.
m6a-UdS/dvca
Damn Vulnerable Cloud Application
owasp-cloud-security/owasp-cloud-security
OWASP Cloud Security - Enabling conversations through threat and control stories
andresriancho/vpc-vpn-pivot
Pivot into private VPC networks using a VPN connection
RhinoSecurityLabs/Presentations
A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
securing/eth-rd-messenger
Ethereum Responsible Disclosure Messenger
damianrusinek/eth-messenger-py
Ethereum Responsible Disclosure messenger in Python.