Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

A curated list of awesome Security Hardening techniques for Windows.

Learn javascript in one picture.

Learn python3 in one picture.

Learn python3 in one picture.

A curated list of awesome security platforms,including CTF/Security Response Center/Bug Tracker and so on.

Platform to host Capture the Flag competitions

MouseJack device discovery and research tools

Notes on various topics.

Automate the creation of a lab environment complete with security tooling and logging best practices

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Python module for interacting with Netgear's Arlo camera system.

Damn Vulnerable eXtensive Training Environment

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Browser's XSS Filter Bypass Cheat Sheet

A container repository for my public web hacks!

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

PowerSploit - A PowerShell Post-Exploitation Framework

Metasploit Framework

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Scripted Local Linux Enumeration & Privilege Escalation Checks

Linux Exploit Suggester; based on operating system release number

Search Exploitable Software on Linux

Next-Generation Linux Kernel Exploit Suggester