1493956 matches found
refinery
Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refineryβ’ is a collection of Python scripts...
Juiceshopgl
Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability The most trustworthy online shop out there. @dschadow β The best juice shop on the whole internet! @shehackspurple β Actually the most bug-free vulnerable application in existence! @vanderaj β First you ππthen you π’ @kramse β But this...
metarget
δΈζ | English 1 Introduction Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically. 1.1 Why Metarget? During security researches, we might find that the...
linux-smart-enumeration
First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...
firmware
π¦ Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. β‘ Get Our Officia...
OFFAT
OWASP OFFAT OFFensive Api Tester β source-aware API security testing. Maps your API from code, proves sourceβsink paths on a code graph, executes tests with a Rust engine, and triages the results with AI. Documentation Β· Install Β· Usage Β· GitHub Action Authorized use only. Live runs send real...
Moxy
Moxy Moxy Next-Gen Man in the middle proxy Open-source DAST tool for pentesting powered by agentic AI capabilities Supporting Ollama. Built on top of browser-use, Moxy streamlines dynamic application security testing. π INSANELY EASY TO USE And it's free, who doesn't like free stuff? Preview Aler...
mcp-shark
mcp-shark Security scanner for AI agent tools β built for security and platform engineers working with MCP in the IDE. Run a local static scan over MCP IDE configs and embedded tool metadata: 41 rules including AAuth visibility, toxic-flow heuristics, and SARIF / HTML / JSON reports. There is no...
some-tweak-to-hide-jwt-payload-values
some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...
cover
Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install Β· Quick start Β· Policies Β· Monitoring Β· Pi / OMP Β· Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...
datadome-vm
DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...
umap2
Umap2 Umap2 is the second revision of NCC Group's python based USB host security assessment tool. This revision will have all the features that were supported in the first revision: umap2emulate - USB device emulation umap2scan - USB host scanning for device support umap2detect - USB host OS...
cloud-custodian
Cloud Custodian c7n Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features π Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. β‘ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! π Multi-threaded. β¨ Suppor...
aura-inspector
aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...
snuffleupagus
Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features β’ Download β’ Examples β’ Documentation β’ License β’ Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...
PSBits
PSBits Simple relatively solutions allowing you to dig a bit deeper than usual. Each folder should have its own readme.md explaining details. If not - the code has extensive comments at the beginning and inline. Newsletter: https://gtworek.ck.page/ If you want to compile stuff on your own, the...
linux-4.1.15_CVE-2022-3564
Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...
cloud-sniper
Cloud Sniper has a new home!! Click here to visit!! Cloud Security Operations What is Cloud Sniper? Cloud Sniper is a platform designed to manage Security Operations in cloud environments. It is an open platform which allows responding to security incidents by accurately analyzing and correlating...