Curated list of public penetration test reports released by several consulting firms and academic security groups

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A collection of various awesome lists for hackers, pentesters and security researchers

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

📜 Modelos readme para qualquer pessoa copiar e usar em seu GitHub.

A repository that includes all the important wordlists used while bug hunting.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

A list of resources for those interested in getting started in bug bounties

A curated list of awesome embedded and IoT security resources.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming la…

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

reNgine is a reconnaissance engine(framework) that does end-to-end reconnaissance with the help of highly configurable scan engines and does information gathering about the target web application. …

Six Degrees of Domain Admin

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" fo…

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

Reverse Shell as a Service

Resources for Blazor, a .NET web framework using C#/Razor and HTML that runs in the browser with WebAssembly.

Accessibility engine for automated Web UI testing

Tá começando no Flutter? Este livro é para você

Production-Grade Container Scheduling and Management