atomic-red-team
redcanaryco/atomic-red-teamSmall and highly portable detection tests based on MITRE's ATT&CK.
educationlabs-practicepenetration-testing+1
12.4k
redcanaryco/atomic-red-teamSmall and highly portable detection tests based on MITRE's ATT&CK.
streaak/keyhacksCurated collection of commands to validate leaked API keys from bug bounty programs and penetration tests, covering 80+ services including AWS,…
getanteon/anteoneBPF-powered Kubernetes monitoring and performance testing platform that automatically generates service maps, tracks real-time metrics, and runs…
c2sp/wycheproofProject Wycheproof tests crypto libraries against known attacks.
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
0xmaximus/galaxy-bugbounty-checklistTips and Tutorials for Bug Bounty and also Penetration Tests.
bishopfox/cloudfoxAutomating situational awareness for cloud penetration tests.
dirkjanm/mitm6Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…
lukechilds/reverse-shellOn-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.
galkan/crowbarCrowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by…
endava/catsAutomated REST API fuzzer and negative testing tool for OpenAPI endpoints. Generates, runs, and reports thousands of self-healing tests with no…
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
owasp/offatAutomated API security testing tool that generates tests from OpenAPI specs, fuzzes inputs, and checks for OWASP API Top 10 vulnerabilities including…
globocom/huskyciPerforming security tests inside your CI
papamica/waf-checkerTests your WAF with +160 payloads
blst-security/cherrybombCLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…