BishopFox

Adversary Emulation Framework

Never ever ever use pixelation as a redaction technique

Automating situational awareness for cloud penetration tests.

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Convolutional neural network for analyzing pentest screenshots

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

A collection of manifests that will create pods with elevated privileges.

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.