A runbook for the PSF, for TUF key setup and initial signing operations to bootstrap signing for PyPI.

A script that turns ScoutSuite reports into CSV files to ease QA

Uncover forgotten secrets and bring them back to life, haunting security and operations teams.

NSE script based on Vulners.com API

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

GGRC Core

Open Source Risk Engine

Awesome Node.js Security resources

goSDL

An archive of everything related to OSCP

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Connect to a Slack workspace and deprovision a user.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Automation for internal Windows Penetrationtest / AD-Security - Still much work to do

Collection of OSCP study material && tools.

Various code snippets

Educational Phishing Tool & Information Collector

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Checklist of the most important security countermeasures when designing, testing, and releasing your API

python3 script that searches a network range for hosts hosting interesting pages that an attacker can leverage. Author: Cedric Owens

Hunt for security weaknesses in Kubernetes clusters

Discover Printers

People tracker on the Internet: OSINT analysis and research tool.

Active Directory Security For Red & Blue Team

Six Degrees of Domain Admin

A curated list of awesome Security Hardening techniques for Windows.

A Tool for Domain Flyovers

PowerSploit - A PowerShell Post-Exploitation Framework

File upload vulnerability scanner and exploitation tool.

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway