Download and Activate Microsoft Office 2021 (Latest) for free. (Legal)

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Posters, drawings...

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability

This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Yet Another CTF Playbook

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises.

handy powershell scripts

Flutter Reverse Engineering Framework

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

The Magic Mask for Android

This repository contains an example Python API that is vulnerable to several different web API attacks.

Pre-Built Vulnerable Environments Based on Docker-Compose

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository …

completely ridiculous API (crAPI)

The cheat sheet about Java Deserialization vulnerabilities

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

a useful utility for android app security testing

A big list of Android Hackerone disclosed reports and other resources.

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!