Stars
Plum Budget is built using the MERN stack (MongoDB, Express, React/Redux, Node.js). The goal is to build a secure and confidential budget app.
A small script that automates Entra ID persistence with Windows Hello For Business key
Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.
PingCastle - Get Active Directory Security at 80% in 20% of the time
Desktop application that helps you summarize your wealth in Path of Exile
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
Checklist of the most important security countermeasures when designing, testing, and releasing your API
A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters
Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
PowerShell framework to assess Azure security
A OWASP Based Checklist With 500+ Test Cases
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
SQL powered operating system instrumentation, monitoring, and analytics.
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens
In-depth attack surface mapping and asset discovery
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
A list of interesting payloads, tips and tricks for bug bounty hunters.
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place
Find domains and subdomains related to a given domain
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A tool for adding new lines to files, skipping duplicates
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
A simple way of sending messages from the CLI output to your Slack with webhook.
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
Obisdian.md plugin for creating timelines
Proof-of-concept obfuscation toolkit for C# post-exploitation tools