auditd

/ | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of security-relevant...

monkey365

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

BugId

BugId Detect, analyze and uniquely identify application bugs. TL;DR Do you... want to know what kind of bug is causing an application to crash? want to know if a bug might be security vulnerability? want to find out if two or more crashes are caused by the same bug? want a human readable report...

KQL-threat-hunting-queries

Threat hunting/detecting using KQL queries | |/ / | | | | | | | | | / | | | | | | | | | \ | | | | \ | |/ | | ' | | | | | | | | || | | | | / \ | | | || | | | | | | | | | || | | | | . | || | | | | | | !NOTE Jan. 27th: After almost a year of contributions, this repository is undergoing a heavy...

CVE-2021-45232

CVE-2021-45232 CVE-2021-45232 POC 1、Apache APISIX Dashboard unauthorized access vulnerability CVE-2021-45232 scan 2、Apache APISIX Dashboard default password scan...

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

kubestriker

A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

DevSecOpsGuideline

OWASP DevSecOps Guideline The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use in this matter. Also, the project is trying to help us promote the shift-left security culture in our development process. This projec...

WebSecurityProject

WebSecurityProject Analysis and replication of CVE-2022-23988 and CVE-2022-34265...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

Web-App-PenTesting

🚀 Quick Start 1. Clone the repository git clone https://github.com/Sarthak4126/Web-App-PenTesting.git cd Web-App-PenTesting/targetapp 2. Install dependencies pip install -r requirements.txt 3. Launch the target application python app.py App runs at: http://127.0.0.1:5000 4. Run the automated...

cve-2025-22235-demo

CVE-2025-22235: Spring Boot EndpointRequest.to Authentication Bypass Vulnerability Demo Vulnerability Description CVE-2025-22235 is a Spring Boot security vulnerability involving the EndpointRequest.to method, which may generate an incorrect matcher when configuring security rules, leading to the...

veinmind-tools

veinmind-tools Documentation veinmind-tools is self-developed by chaitin technology ， cloudwalker team incubation，a container security toolset based on veinmind-sdk 🔥 Demo Veinmind has been connected to openai. You can use openai to conduct a user-friendly analysis of the scan results, allowing y...

AndroidWebviewInjectDemo

AndroidWebviewInjectDemo An app demo for test android webview security issue: CVE-2012-6636...

graudit

graudit graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being...

cloudfox

🦊 CloudFox 🦊 CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CLOUDFOX UPDATE REQUIRED: 12/202...

backdoor-learning-resources

Backdoor Learning Resources This Github repository summarizes a list of Backdoor Learning resources. For more details and the categorization criteria, please refer to our survey. We will try our best to continuously maintain this Github Repository in a monthly manner. Why Backdoor Learning?...

expliot

EXPLIoT Noun: /ɛkˈsplʌɪəti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...