Docker-hijack demonstrates how an adversary could hijack the docker build process to embed malware in container images.

DevSecOpsGuides

Web attack scenario

All about bug bounty (bypasses, payloads, and etc)

Security Books, Mind-Maps, Vulnerabilities Notes, methodologies, fuzzing lists, writeups, disclosed reports and Bug-Bounty-Tips

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Web Attack Cheat Sheet

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained p…

All-in-one chatbot client

A port of ParrotSec's stealth and anonsurf modules to Kali Linux

I leverage OpenAI and ChatGPT to do hackerish things

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A list of cheat sheets for application security

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation and Customizations for AWS Control Tower.

✨ Seamlessly visualize your JSON data instantly into graphs.

Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

Sticky notes for pentesting.

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Compiled tools for internal assessments

Standard and Advanced Demos for learn.cantrill.io courses

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

The Official USB Rubber Ducky Payload Repository

SourceGPT - prompt manager and source code analyzer built on top of ChatGPT as the oracle

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.