Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

Command line interface for the Phylum API

An ongoing collection infosec courses, learning tutorials, libaries, and training resources.

A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron.

This GitHub Action allows you to run Gitleaks in your GitHub workflow.

An Online Collection of Open Source Intelligence Tools

SSH server vulnerability and security scanner with Operous

Refer to this repository to use a containerized security workflow or build your custom workflow with these containers as a base.

This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.

A PowerShell module for generating and parsing "security.txt" files.

An Nginx module for persistent privileged malware

Vintage Sleuth is a local subnet and Bluetooth scanner with device name, IP address, and mac address spoofing features.

Cyber Sec: Resources & Tools

World Serpant Search is a command-line tool for vulnerability detection. It allows you to scan directories for various types of vulnerabilities, including XSS vulnerabilities, authentication bypass vulnerabilities, and package vulnerabilities using the National Vulnerability Database (NVD).

PHP code sniffer plugin for Drupal code security audit.

Monitoring Your User Uploader Activity

A Laravel demo of a Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

نسخه ی نمایشی است که نشان می دهد چگونه می توان فایل های اجرایی، حساب های خدماتی و سرویس های ابری مورد اعتماد مایکروسافت را برای قدرت بخشیدن به یک بدافزار استفاده کرد.