Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
CANtact cantact.io
"The Open Source Car Tool" designed to help you hack your car. You can buy one or make your own following the guide here.
-
canopen canopen.readthedocs.io
Python module to communicate with CANopen devices
-
Car Hacking in 30 Minutes or Less brysonpayne.com
Using VirtualBox and Kali Linux, you can start car hacking using completely free open-source software and tools, including can-utils, ICSim, ScanTool, Wireshark, and tcpdump
-
The Appliance for Digital Investigation and Analysis (ADIA) forensics.cert.org
VMware-based appliance used for digital investigation and acquisition and is built entirely from public domain software. Among the tools contained in ADIA are Autopsy, the Sleuth Kit, the Digital Forensics Framework, log2timeline, Xplico, and Wireshark. Most of the system…
-
Memoryze fireeye.com
Free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis.
-
-
ARTist artist.cispa.saarland
a flexible open-source instrumentation and hybrid analysis framework for Android apps and Android's Java middleware. It is based on the Android Runtime's (ART) compiler and modifies code during on-device compilation.
-
AppSweep by Guardsquare appsweep.guardsquare.com
Free, fast Android application security testing for developers
-
GitHub Enterprise Remote Code Execution bounty.github.com
-
RTIR bestpractical.com
Request Tracker for Incident Response (RTIR) is the premier open source incident handling system targeted for computer security teams. We worked with over a dozen CERT and CSIRT teams around the world to help you handle the ever-increasing volume of incident reports. RTIR…
-
GitHub Enterprise SQL Injection blog.orange.tw
-
Advisory: Java/Python FTP Injections Allow for Firewall Bypass blog.blindspotsecurity.com
-
-
AWS takeover through SSRF in JavaScript 10degres.net
-
Altus iX Developer XAML Deserialization RCE 0day-rubbish.com
-
Malicious Software zeltser.com
-
python-registry williballenthin.com
-
Others owasp.org
-
JS Nice jsnice.org
a web service guessing JS variables names and types based on the model derived from open source.
-
Docker Metasploit hub.docker.com
-
EnCase guidancesoftware.com
The shared technology within a suite of digital investigations products by Guidance Software
-
Findsubdomains findsubdomains.com
A subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results.
-
CodeEngn codeengn.com
(Korean)
-
Android Device Security Database android-device-security.org
Database of security features of Android devices
-
Detox relentless-coding.org
A Javascript malware analysis tool.
-
Metasploit metasploit.com
Penetration testing software.
-
Revelo kahusecurity.com
Analyze obfuscated Javascript code.
-
Image Steganography Online incoherency.co.uk
This is a client-side Javascript tool to steganographically hide images inside the lower "bits" of other images
-
Metasploit JavaScript Obfuscator github.com
-
Xxxswf bitbucket.org
A Python script for analyzing Flash files.
-
The Great Escape (Docker) tryhackme.com
Escaping Docker container.
-
Solr Exploiting Log4j tryhackme.com
Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.
-
Python Playground tryhackme.com
Use python to pwn this room.
-
Osint tryhackme.com
Intro to Open Source Intelligence.
-
Insecure Kubernetes tryhackme.com
Exploiting Kubernetes by leveraging a Grafana LFI vulnerability.
-
Dogcat tryhackme.com
I made a website where you can look at pictures of dogs and/or cats! Exploit a PHP application via LFI and break out of a Docker container.
-
Workbench workbench.readthedocs.org
A scalable python framework for security research and development teams.
-
Threat Jammer threatjammer.com
REST API service that allows developers, security engineers, and other IT professionals to access curated threat intelligence data from a variety of sources.
-
SSHGuard sshguard.net
A software to protect services in addition to SSH, written in C
-
Sqreen sqreen.io
Sqreen is a Runtime Application Self-Protection (RASP) solution for software teams. An in-app agent instruments and monitors the app. Suspicious user activities are reported and attacks are blocked at runtime without code modification or traffic redirection.
-
sqlmap sqlmap.org
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range…
-
Scammer-List scammerlist.now.sh
A free open source AI based Scam and Spam Finder with a free API
-
PhishTank phishtank.com
PhishTank is a collaborative clearing house for data and information about phishing on the Internet. Also, PhishTank provides an open API for developers and researchers to integrate anti-phishing data into their applications at no charge.
-
OSSEC ossec.github.io
Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems…
-
Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities nodejs-security.com
Master secure coding in Node.js with real-world vulnerable dependencies and experience firsthand secure coding techniques against Path Traversal vulnerabilities.
-
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities nodejs-security.com
Learn secure coding conventions in Node.js by executing command injection attacks on real-world npm packages and analyzing vulnerable code.
-
Understanding API Security manning.com
Free eBook sampler that gives some context for how API security works in the real world by showing how APIs are put together and how the OAuth protocol can be used to protect them.
-
Securing DevOps manning.com
A book on Security techniques for DevOps that reviews state of the art practices used in securing web applications and their infrastructure.
-
Full Stack Python Security manning.com
A comprehensive look at cybersecurity for Python developers
-
API Security in Action manning.com
Book covering API security including secure development, token-based authentication, JSON Web Tokens, OAuth 2, and Macaroons. (early access, published continuously, final release summer 2020)
- next page of items loading…
