WebGoat is a deliberately insecure application

Integrate static security testing with HCL AppScan on Cloud using GitHub Actions

Latest CVEs with their Proof of Concept exploits.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

This tool named "Sms-Bomb" is mainly use to prank friends with this , All working apis are present in the script , If you do any illegal activites through this script we are not responsible

All the deals for InfoSec related software/tools this Black Friday

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Finds all public bug reports on reported on Hackerone

Security Guide for Developers

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

SSRF (Server Side Request Forgery) testing resources

ASN reconnaissance script

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

🤖 The Modern Port Scanner 🤖

👹 👹 👹

⛔ offsec batteries included

Notes Taken for HTB Machines & InfoSec Community.

A collective list of free APIs

OSWE Preparation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

The Bug Hunters Methodology

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

A collective list of public APIs for use in security. Contributions welcome

Efficiently process large code repositories to enable effective code reviews with GPT. The tool streamlines the task by filtering relevant content and preparing it in manageable, tokenized chunks f…

A quick and dirty script to bypass SSL pinning of Flutter applications

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.