Lists (4)
Starred repositories
This project aims to maintain Wappalyzer technologies
ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
A collection of manifests that will create pods with elevated privileges.
We track 5 million open-source packages, exposing vulnerabilities before they get CVE numbers. Many never do.
My personal collection of resources (mostly tools and training materials) for source code security audits.
xdperf is a high-performance network traffic generation tool that leverages XDP (eXpress Data Path).
rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks
Open-source AI hackers to find and fix your app’s vulnerabilities.
AirPods liberated from Apple's ecosystem.
Bruteforcing from various scanner output - Automatically attempts default creds on found services.
Files for RSAC 2025 Lab: CTF-T09-Cloud-CTF-201
letsencrypt/acme client implemented as a shell-script – just add water
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
A curated collection of publicly available resources on how companies around the world practice DevOps
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).
Wordlists for creating statistically likely username lists for use in password attacks and security testing
Sandbox implemented in GO including containers (namespace, cgroup), ptrace, seccomp
Vulnerability scanner based on vulners.com search API
BChecks collection for Burp Suite Professional and Burp Suite DAST
Anthropic's Interactive Prompt Engineering Tutorial
PAYGoat is a banking application built for educational purposes, focused on exploring and understanding common business logic flaws in financial platforms.
nannyml: post-deployment data science in python
yep full list of virustotal machines, OG REPO