AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Here you will find the exploits that I needed to fix or create.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

DevSecOps Pipeline using SAST + DAST and SCA tools

O repositório Cyber Security Roadmap é uma iniciativa para ajudar a comunidade de segurança da informação a se orientar sobre o que estudar.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL

Security Champions Playbook v 2.1

Base LaTeX template for a penetration test report.

Bundletool is a command-line tool to manipulate Android App Bundles

🎯 Command Injection Payload List

Performing security tests inside your CI