akto

Seguridad de API de Akto.io Contribuyentes ¿Qué es Akto? Cómo funciona • Primeros pasos • Inventario de APIs • Pruebas de API • Añadir prueba • Únete a la comunidad de Discord • Akto es una plataforma de seguridad de API de código abierto e instantánea que solo tarda 60 segundos en ponerse en...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

API-Security

OWASP API Security Top 10 This project is designed to address the ever-increasing number of organizations that are deploying potentially sensitive APIs as part of their software offerings. These APIs are used for internal tasks and to interface with third parties. Unfortunately, many APIs do not...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

DOMPurify

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.16. DOMPurify runs as JavaScript and works in all modern browsers...

sectemplates

Sectemplates I'd like to announce the creation of SecTemplates.com, a website where infosec professionals, and startup engineering teams lacking a security team, can find templates to help bootstrap their programs. The primary focus of this site will be to provide starting points for Preparation...

tenzir

Pipelines de Datos para Equipos de Seguridad Recopila, transforma, enriquece y enruta tu telemetría—todo en un solo lugar. ¿Qué es Tenzir? Tenzir es el motor de pipelines de datos para equipos de seguridad. Si necesitas recopilar, analizar, modelar, normalizar, agregar, almacenar, consultar y...

drozer

drozer drozer es un framework de pruebas de seguridad para Android. drozer te permite buscar vulnerabilidades de seguridad en aplicaciones y dispositivos asumiendo el rol de una aplicación e interactuando con el Android Runtime, los endpoints IPC de otras aplicaciones y el sistema operativo...

Mr.SIP

Marco de seguridad, ataque y auditoría SIP Mr.SIP...

hardening-k8s-containers

Aplicación de toma de notas intencionalmente vulnerable Este repositorio contiene una aplicación muy simple y vulnerable utilizada para demostrar las diferencias entre desplegar esta aplicación con la configuración predeterminada en un clúster de Kubernetes, frente a agregar algunas configuracion...

claude-code-devcontainer

Claude Code in a devcontainer A sandboxed development environment for running Claude Code with bypassPermissions safely enabled. Built at Trail of Bits for security audit workflows. Why Use This? Running Claude with bypassPermissions on your host machine is risky—it can execute any command withou...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

CVE-2018-7197

CVE-2018-7197 CVE-2018-7197 Análisis...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

Penetration-Testing-Tools

A collection of my Penetration Testing Tools, Scripts, Cheatsheets This is a collection of more than a 160+ tools, scripts, cheatsheets and other loots that I've been developing over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my...

auditd

/ | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Configuración de Auditd de Buenas Prácticas Idea La idea de esta configuración de auditd es proporcionar una línea base de buenas prácticas que está diseñada para cargarse sin modificaciones en las principales distribuciones...

Shield

README Para las instrucciones de instalación y uso, consulte mi publicación de blog: https://theevilbit.github.io/shield/...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

secator

La navaja suiza del pentester. Características • Comandos soportados • Instalación • Uso • Documentación • ¡Únete a nosotros en Discord! secator es un ejecutor de tareas y flujos de trabajo utilizado para evaluaciones de seguridad. Soporta docenas de herramientas de seguridad conocidas y está...

InfoSec-Black-Friday

InfoSec Black Friday & Cyber Monday Deals "InfoSec Cares" 2025 Edition All the deals for InfoSec related software/tools this coming Black Friday and Cyber Monday. ALL LINKS UPDATED FOR 2025! Many more incoming... Quick Personal Update After being involved in a car accident and everything going...