#
Lists (32)
Active Directory
4 repositories
AI
4 repositories
Books
1 repository
Browser Extensions
2 repositories
Chatbot
1 repository
Cloud
15 repositories
Code Review
15 repositories
Desktop Applications
4 repositories
Docker
5 repositories
Electron Apps
1 repository
Exploits
1 repository
Hardening
1 repository
IoT/Devices/Firmware
7 repositories
Kiosk
1 repository
Kubernetes
8 repositories
Leak/Breaches
1 repository
Linux/macOS
5 repositories
Mail Security
2 repositories
Misc Web Apps
1 repository
Mobile
13 repositories
Network
3 repositories
OSINT
1 repository
Passwords/Dictionaries
4 repositories
Pentest Knowledge Base
25 repositories
Phishing
1 repository
Remote Access
2 repositories
Salesforce
1 repository
Smart Contract
20 repositories
Vulnerable by Design
1 repository
Web App/API
37 repositories
Windows
8 repositories
WordPress
3 repositories
Starred repositories
Moxie scans & tests MQTT services. Secure your IoT infrastructure!
📱 objection - runtime mobile exploration
AI-driven Static Analyzer. Supports Rust and Smart contracts: Solana based on Rust, Ethereum based on Solidity.
Software analytics tool that helps developers analyse and improve software quality.
Bandit is a tool designed to find common security issues in Python code.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
A curated list of awesome resources related to enhancing your enterprise Email Security
OWASP Smart Contract Securty Verification Standard
A pentest reporting tool written in Python. Free yourself from Microsoft Word.
A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.
Firepwn is a tool made for testing the Security Rules of a firebase application.
Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
Parses Snaffler output file and generate beautified outputs.
a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
A collection of awesome security hardening guides, tools and other resources
A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.
A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
Everything and anything related to password spraying