Git All the Payloads! A collection of web attack payloads.

Full Nuclei automation script with logic explanation.

A Bind9 server for pentesters to use for Out-of-Band vulnerabilities

Scripts to set up your own Android 📱 app hacking lab

Templates to integrate Fortify application security testing with Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI)

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

All Labs of the Security for Developers Training

Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The xss finder gets a link from the user and scan the website for XSS vulnerability by injecting malicious scripts at the input place.

pre-commit hooks to run snyk

Rule packs for Signal Sciences power rules platform.

Deprecated; please use 'fcli tool * install' commands provided by fcli (https://github.com/fortify-ps/fcli) instead

Scan incoming commits for secrets with Talisman.

A Github Action to parse DependencyCheck JSON reports, print the found vulnerabilities and fail the build.

This repo holds the SAST-SCANNER Dockerfile used in Command Center Scanner.

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

Deploy a Private Burp Collaborator server with a wildcard Let's Encrypt SSL certificate including automatic renewal for advanced penetration testing. Includes scripts and guides for a seamless cloud deployment process.

say Hello World! on Concourse

OWASP Juice Shop Laboratory

Simple script to find secrets inside source code folders

pre-commit hooks to run grype