Cybersecurity oriented awesome list

Top disclosed reports from HackerOne

Complete list of LPE exploits for Windows (starting from 2023)

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

Tools and methods that I personally use for Recon and Exploitations

Dump cookies and credentials directly from Chrome/Edge process memory

A curated list of awesome forensic analysis tools and resources

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉

一个攻防知识仓库 Red Teaming and Offensive Security

A powerful obfuscator for JavaScript and Node.js

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educati…

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization,…

OffSec OSINT Pentest/RedTeam Tools

This repository contains my complete resources and coding practices for malware development using Rust 🦀.

Nuclei Templates Collection

一个Vulhub漏洞复现知识库

Red Teaming Tactics and Techniques

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

资料分享

💿 Free software that works great, and also happens to be open-source Python.

基于Threathunting-book基础上完善的狩猎视角红队handbook

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws