A Pythonic framework for threat modeling

Explore ThalesGroup's comprehensive framework for secure machine learning systems on this repository. Developed by Thales experts, this framework encompasses essential security requirements, guidel…

⛵ App Platform sample Python application.

Autoconfigured ELK Stack That Contains All EPSS and NVD CVE Data

A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).

NIVA is a simple web application which is intentionally vulnerable to NoSQL injection. The purpose of this project is to facilitate a better understanding of the NoSQL injection vulnerability among…

Intentionally Vulnerable to Spring4Shell

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

This project is about creating and publishing threat model examples.

python-pentesting-tool

A reference architecture for deploying containerized microservices with Amazon ECS and AWS CloudFormation (YAML)

Java Security Animated is a Swing application demonstrating the core Java security concepts along with the security model implemented in notorious Java frameworks such as Spring Framework, JavaEE a…

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Penetration Testing / OSCP Biggest Reference Bank / Cheatsheet

exploit-database-papers

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

A tool to dump Java serialization streams in a more human readable form.

A python script that finds endpoints in JavaScript files

Stuff about it-security that might be good to know