A curated catalogue of awesome agentic AI patterns

Neo4j official MCP Server

Nikto web server scanner

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

An AWS IAM Privilege Escalation Path Library

Let's Threat Model is an Agentic AI tool that helps teams identify and manage threats early in the development lifecycle. Built with extensibility and automation in mind, it brings threat modeling …

This repository contains resources and materials for the "AI Agents and Retrieval Augmented Generation (RAG) for Cybersecurity Operations" and other courses by Omar Santos.

A collection of Azure AD/Entra tools for offensive and defensive security purposes

A list of semi to fully remote-friendly companies (jobs) in tech.

A list of resources for those interested in getting started in bug bounties

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

21 Lessons, Get Started Building with Generative AI

12 Lessons to Get Started Building AI Agents

Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing…

A curated list of free courses with certifications. Also available at https://free-certifications.com/

Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)

A collection of MCP servers.

Check subdomains for subdomain takeovers and other DNS tomfoolery

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

List of changes announced for AWS that may break existing code

A repository of breaches of AWS customers

Collection of example YARA-L rules for use within Google Security Operations

All the deals for InfoSec related software/tools this Black Friday

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

A tool for customers to evaluate their AWS service configurations based on AWS and community best practices and receive recommendations on potential improvements.

Know, don’t guess, who can access what.

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code