Security automation content in SCAP, Bash, Ansible, and other formats

Full Nuclei automation script with logic explanation.

Ghost Security's Skills Marketplace supercharges Claude Code to be an application security expert in code security analysis, dependency/secrets scanning, and dynamic vulnerability testing

Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations

Scripts I have written to perform various IT Security admin tasks. From validating findings to performing automated attacks

F5 Agility Labs for Web Application Firewall Use Cases

Templates to integrate Fortify application security testing with Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI)

Rudimentary network protocol fuzzer using bash, netcat, and other tools.

Stage Two containers of OWASP PurpleTeam

Deploy a Private Burp Collaborator server with a wildcard Let's Encrypt SSL certificate including automatic renewal for advanced penetration testing. Includes scripts and guides for a seamless cloud deployment process.

Deprecated; please use 'fcli tool * install' commands provided by fcli (https://github.com/fortify-ps/fcli) instead

This tool for analyzing android application

Namely SecScan is a read-only VPS security scanner that generates a full audit report.

This GitHub Action installs zizmor CLI

Model Context Protocol (MCP) integration for Burp Suite and VS Code. A proxy for context sharing, AI-assisted analysis, and streamlined security workflows

Hermes-Sens is an automated static analysis tool for React Native Android applications. It decompiles APKs using apktool, decompiles Hermes bytecode into pseudo-JavaScript, and extracts sensitive artifacts such as secrets, tokens, endpoints, and authentication logic using pattern-based analysis.

The Whale Sentinel Services

OWASP Juice Shop Laboratory

🔗 Manage kubectl port-forwards to Kubernetes services reliably using v1.22, ensuring stable database connections without workarounds.

Check if your Imperva WAF protected websites are accessible directly!