An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Understanding Deep Learning - Simon J.D. Prince

A Curated list of IoT Security Resources

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-d…

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Metasploit Framework

Security risk analysis for Kubernetes resources

Open Source Vulnerability Management Platform

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

Testing TLS/SSL encryption anywhere on any port

Fast and powerful SSL/TLS scanning library.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A Pure-Python PostgreSQL Driver

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Security risk analysis for Kubernetes resources

A tool to scan Kubernetes cluster for risky permissions

Linux enumeration tool for pentesting and CTFs with verbosity levels

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A repository for learning various heap exploitation techniques.

List of ngrok alternatives and other ngrok-like tunneling software and services. Focus on self-hosting.

Attack Surface Management Platform

Collection of the cheat sheets useful for pentesting

Docker - Beginners | Intermediate | Advanced

Simple HS256 JWT token brute force cracker

Deserialization payload generator for a variety of .NET formatters

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.