A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Ghidra is a software reverse engineering (SRE) framework

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Dex to Java decompiler

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

A tool for reverse engineering Android apk files

UNIX-like reverse engineering framework and command-line toolset

Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http

Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

📊 An infographics generator with 30+ plugins and 300+ options to display stats about your GitHub account and render them as SVG, Markdown, PDF or JSON!

Fast web fuzzer written in Go

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

In-depth attack surface mapping and asset discovery

Web path scanner

ChatterBot is a machine learning, conversational dialog engine for creating chat bots

Directory/File, DNS and VHost busting tool written in Go

Various Dockerfiles I use on the desktop and on servers.

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

LuLu is the free open-source macOS firewall

PowerSploit - A PowerShell Post-Exploitation Framework

Gorilla: Training and Evaluating LLMs for Function Calls (Tool Calls)

The free coding agent

A list of resources for those interested in getting started in bug bounties

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

The single instruction C compiler

Download videos from almost any website. Lightweight, self-hosted media downloader with a clean web UI.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

An overview of Go syntax and features.

Go by Example