The official Exploit Database repository

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

A collection of awesome penetration testing resources, tools and other shiny things

Checklist of the most important security countermeasures when designing, testing, and releasing your API

A collection of various awesome lists for hackers, pentesters and security researchers

Collection of the cheat sheets useful for pentesting

Published vulnerabilities and exploits. Some are on exploit-db, some aren't.

Executables created while writing "Introduction to Manual Backdooring".

Windows exploits, mostly precompiled.

The Bug Hunters Methodology

Penetration Testing/Security Cheatsheets

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

Useful for CTFs, wargames, pentesting. Educational purposes. Or for fun. Or profit.

A mirror of the original SSLstrip+ code by Leonardo Nve

This contains common local exploits and enumeration scripts

Local UNIX PrivEsc Aggregation