JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Checklist for container security - devsecops practices

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Docker configurations for TheHive, Cortex and 3rd party tools

Collecting IOCs posted on Twitter

POC of CVE-2021-2394

OWASP Web Security Testing Checklist - Assessment # 01

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

📡PoC auto collect from GitHub.

A collection of hacking / penetration testing resources to make you better!

Kubernetes Lab Tutorial

Wazuh - Project documentation

Wazuh - Host and endpoint security

Simple python backdoor with Ngrok tunnel support

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and we…

Android Remote Administration Tool

Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kud…

OSX and iOS related security tools

A curated list of awesome awesomeness

A collection of OSX and iOS security resources

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Python botnet and backdoor

Aktaion: Open Source ML tool and data samples for Exploit and Phishing Research

FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.

Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malicious sample and automatically generates a list of mutexes tha…

This is a webshell open source project