jose nazario

awesome-honeypots. an awesome list of honeypot resources

awesome-cybersecurity-internships. a list of cybersecurity internships

lfi-labs. small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

awesome-internet-scanning. A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.

Awesome-Pentest-1. Awesome Penetration Testing A collection of awesome penetration testing resources

xss-labs. small set of scripts to practice exploit XSS and CSRF vulnerabilities

ObsidianSailboat. Nmap and NSE command line wrapper in the style of Metasploit

BurningDogs. Honeypot log processor to create OTX Pulse entries

Recon-ng. personal fork of OSINT tool recon-ng

bibtex2word. processes Bibtex files, produces Word Source.xml output

ColossalOpera. reddit daily_programmer challenge ideas

ShoppingLeague. wordpress honeypot

HorribleCanoe. yara rules

Recon-ng-modules. Additional modules for recon-ng

deepdarkCTI. Collection of Cyber Threat Intelligence sources from the deep and dark web

BrassGlue. codename/mascot generator, also good for band names

matrixdump. network traffic dump in the style of the Matrix movies

libfenc. functional encryption library. Automatically exported from code.google.com/p/libfenc

leadership. A public compilation of Webflow's documentation that outlines how we practice servant leadership and the management strategies that follow.

Damn-Vulnerable-Bank. Vulnerable Banking Application for Android

connlogger. simple server-side connection logger, useful as a simple honeypot

Penetration-Testing-Study-Notes. Penetration Testing notes, resources and scripts

phpsploit. Stealth post-exploitation framework

pyfastbit. Python bindings for FastBit

awesome-pentest-cheat-sheets. Collection of the cheat sheets useful for pentesting

chaps. Configuration Hardening Assessment PowerShell Script (CHAPS)

scans. Cloud security configuration checks

punymud. A compact MUD framework written in Python and YAML

awesome-competitive-programming. :gem: A curated list of awesome Competitive Programming, Algorithm and Data Structure resources

Sn1per. Automated pentest framework for offensive security experts

exploits. Some of my public exploits

pentest. :no_entry: offsec batteries included

windows_hardening. Windows Hardening settings and configurations

advance-update. Advance Update in a Elasticsearch plugin that provides you control over the document update functionality of elasticsearch.

kerbrute. A tool to perform Kerberos pre-auth bruteforcing

CitrixHoneypot. Detect and log CVE-2019-19781 scan and exploitation attempts.

WhatWeb. Next generation web scanner

dronesploit. Drone pentesting framework console

CyBot. Open Source Threat Intelligence Chat Bot

Katana. A Python Tool For google Hacking

bing-ip2hosts. bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Sooty. The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

AzureADLateralMovement. Lateral Movement graph for Azure Active Directory

PIE. :mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

aws_pwn. A collection of AWS penetration testing junk

recog-go. Recog-Go: Pattern Recognition using Rapid7 Recog

ATFuzzer. "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019

Loki. Loki - Simple IOC and Incident Response Scanner

paradoxiaRAT. ParadoxiaRat : Native Windows Remote access Tool.

RedELK. Red Team's SIEM - easy deployable tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

routersploit. Exploitation Framework for Embedded Devices

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

scancode-toolkit. :mag_right: ScanCode scans code and detects licenses, copyrights, package manifests & dependencies and more ... to discover and inventory open source and third-party packages used in your code.

awesome-test-automation-pasteBinRead. A curated list of awesome test automation frameworks, tools, libraries, and software for different programming languages

blockchain-for-software-engineers. A curated list of resources for blockchain engineers

tabler. Tabler - Free HTML Dashboard Theme Built On Bootstrap 4

ClassyBadger. simple "oops" util to fix the previous shell command