Java web common vulnerabilities and security code which is base on springboot and spring security

Community curated list of templates for the nuclei engine to find security vulnerabilities.

✨ Open-source AI hackers for your apps 👨🏻‍💻

The WebAssembly Binary Toolkit

Adobe Experience Manager (AEM) hacking toolkit

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A library for detecting known secrets across many web frameworks

OSCP Exam Cheat Sheet

Conference presentation slides

A tool to dump a git repository from a website

Dumps Salesforce objects if provided with credentials.

Infosec Wordlists and more.

Apache OFBiz is an open source product for the automation of enterprise processes. It includes framework components and business applications for ERP, CRM, E-Business/E-Commerce, Supply Chain Manag…

This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).

Java Runtime Reverse Engineering and Debugging Tool

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Github-subdomains fork that supports custom timeout for the Github API

lightyear is a tool to dump files in tedious (blind) conditions using PHP filters

Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

Subdomain Takeover Checker

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Deepfakes Software For All

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…