Lists (2)
Stars
Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-rep…
My learning, tutorials on Cybersecurity
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping,…
CoreData encrypted SQLite store using SQLCipher
⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
A curated list of useful resources that cover Offensive AI.
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Cloud Commotion intends to cause chaos to simulate security incidents
Apple BLE proximity pairing message spoofing
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
Flutter SSL pinning bypass using IP forwarding
TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
Find broken links, missing images, etc within your HTML.
Mad-robot / swagger-exp
Forked from lijiejie/swagger-expA Swagger API Exploit
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…
Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.
A completely free, open source and online course about Reverse Engineering iOS Applications.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.