OSWE, OSEP, OSED, OSEE

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

OSCP Guide

A collection of PDF/books about the modern web application security and bug bounty.

Pre-Built Vulnerable Environments Based on Docker-Compose

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with …

In-depth Attack Surface Mapping and Asset Discovery

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in…

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Fast subdomains enumeration tool for penetration testers

World's fastest ANPR / ALPR implementation for CPUs, GPUs, VPUs and FPGAs using deep learning (Tensorflow, Tensorflow lite, TensorRT, OpenVINO). Multi-Charset (Latin, Korean, Chinese) & Multi-OS (J…

This script is intended to automate your reconnaissance process in an organized fashion

📕 My collection of notes for the eJPT certification.

very currency

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can…

Awesome Hacking Tools

PowerSploit - A PowerShell Post-Exploitation Framework

Some setup scripts for security research tools.

A complete computer science study plan to become a software engineer.