CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A vulnerability scanner for container images and filesystems

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

The Leading Security Assessment Framework for Android.

Exploit Development and Reverse Engineering with GDB Made Easy

The Ultimate Information Gathering Toolkit

A syntax-highlighting pager for git, diff, grep, and blame output

Firmware Analysis Tool

Community curated list of public bug bounty and responsible disclosure programs.

📱 objection - runtime mobile exploration

Identify and extract files from container formats using unblob.

Dump cookies and credentials directly from Chrome/Edge process memory

A streamlined tool for discovering TLDs, associated domains, and related domain names.

Bash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm

A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.

AD ACL abuse

A collection of my Semgrep rules to facilitate vulnerability research.

Pre-Built Vulnerable Environments Based on Docker-Compose

Collection of links on bad opsec

Perform a simple scan on your OutSystems applications.

Rust Weaponization for Red Team Engagements.

Top disclosed reports from HackerOne

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

An interpreter for Rust's mid-level intermediate representation

EMBA - The firmware security analyzer

Adversary Emulation Framework

A zero dependency and customizable Python library for scanning Windows and Linux process memory.

Collection of writeups on ICS/SCADA security.

Find domains and subdomains related to a given domain