web cache deception detect

The design, layout and firmware for the purring kitten smd assembly workshop

game of active directory

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocke…

CTF Archives: Collection of CTF Challenges.

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

Offensive Software Exploitation Course

Source Code Management Attack Toolkit

A python script to automatically generate shellcode payload from assembly files.

Mini-Internet using LXC for practical works

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Scripted Local Linux Enumeration & Privilege Escalation Checks

perl, non-alphanumeric, php

A curated list of CTF frameworks, libraries, resources and softwares

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

📚 Freely available programming books