📚 Freely available programming books

A lightweight and modular front-end framework for developing fast and powerful web interfaces

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

A repo containing samples tied to new functionality in each release of Google Chrome.

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Windows Events Attack Samples

Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

Malware samples, analysis exercises and other interesting resources.

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

A repository to monitor attack vectors from state-backed information operations

WAF Bypass Cheatsheet

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

Webkit uxss exploit (CVE-2017-7089)

Hook, DLLInject, PE_Tool

Cookbook for mod_security deployment

An example repository of a simple login system in GoLang

Santoku Website