Matias Sequeira

wallet-security-ranking. Data repository for the Wallet Security Ranking project.

docker_explorer. Scan DockerHub images that match a keyword to find secrets.

publications. Coinspect Publications: audit reports and research.

simple-security-toolkit. A collection of practical security-focused guides and checklists for smart contract development

Awesome-Azure-Pentest. A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

my-arsenal-of-aws-security-tools. List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

BurpSuite-For-Pentester. This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

inql. InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

BurpSuite_403Bypasser. Burpsuite Extension to bypass 403 restricted directory

enumerate-iam. Enumerate the permissions associated with AWS credential set

festin. FestIn - Open S3 Bucket Scanner

ESP32_LoRaWAN. Transplanted from Semtech LoRaWAN(https://github.com/Lora-net/LoRaMac-node) protocol to "ESP32 + Arduino" platform. Use RTC, support deep sleep, only working with ESP32 + LoRa boards made by HelTec Automation(TM). Need a unique license to use it.

nimbostratus. Tools for fingerprinting and exploiting Amazon cloud infrastructures

waybackurls. Fetch all the URLs that the Wayback Machine knows about for a domain

ctf-katana. This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

bytecode-viewer. A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

XSSChallengeWiki. Welcome to the XSS Challenge Wiki!

proj05-nstp_fuzzer. CY6740 Network Security 2020 Spring

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.