eJPTv2 Essentials: Notes & Machines to crush the eJPTv2 Exam.

Web Application Security

Cybersecurity Notes

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be…

Slides from various conferences and talks I've given

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Cybersecurity AI (CAI), the framework for AI Security

Cloudflare, Sucuri, Incapsula real IP tracker.

🥷 SecArchive - Cybersecurity Resource Collection A curated archive of high-quality resources for learning cybersecurity, bug bounty, ethical hacking, and penetration testing.

First ever tool to view "Instagram private posts" anonymously

🤖 The Modern Port Scanner 🤖

Project for CS460 (Security Laboratory) Spring 2017 at UIUC

A collection of slides and presentations from BSides Ahmedabad 2024, held on October 12th and 13th. This repository features key insights and topics in cybersecurity, showcasing sessions and worksh…

An even funnier way to disable windows defender. (through WSC api)

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

🕵️‍♂️ All-in-one OSINT tool for analysing any website

C programming projects with guided practice by LabEx.

A list of public penetration test reports published by several consulting firms and academic security groups.

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a resear…

This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉

Payloads for SQLi

My notes while studying for the PNPT from TCM Security.

An Android app to easily manage Frida server on your device or emulator

Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing…

My notes containing the Certified Red Team Professional Course

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

Cybersecurity Career Path

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

🐶 A curated list of Web Security materials and resources.