🌐 Wikipedia for Web APIs. Directory of REST API definitions in OpenAPI 2.0/3.x format

Reverse proxies cheatsheet

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

test SSL/TLS clients how secure they are

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Exercises to learn how to fuzz with American Fuzzy Lop

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

A tool to perform Kerberos pre-auth bruteforcing

Hackish way to intercept and modify non-HTTP protocols through Burp & others.

american fuzzy lop - a security-oriented fuzzer

VisualCodeGrepper - Code security scanning tool.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

📱 objection - runtime mobile exploration

An implementation of the TLS/SSL protocols

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Collection of resources for my preparation to take the OSEE certification.

Cloud-related research releases from the Rhino Security Labs team.

A tool for quickly evaluating IAM permissions in AWS.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Shiro-721 RCE Via RememberMe Padding Oracle Attack

softScheck Cloud Fuzzing Framework

the TCPdump network dissector

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

Windows OS Hardening with PowerShell DSC

SimplE RePort wrIting and COllaboration tool