Stars
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
A step by step workshop to exploit various vulnerabilities in Node.js and Java applications
Learn Javascript: A list of resources
An open source RESTful API platform for banks that supports Open Banking, XS2A, PSD2 and Open Finance through access to accounts, transactions, counterparties, payments, entitlements and metadata -…
🔐 JSON Web Token Authentication for Laravel & Lumen
Design patterns implemented in Java
A book series (2 published editions) on the JS language.
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Advanced file format fuzzer based-on deep neural language models.
A topic-centric list of HQ open datasets.
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. …
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.
Penetration Testing Playbook (PTP)
Crypto 101, the introductory book on cryptography.
This is a set of minimal scripts to run the emulator in a container for various systems such as Docker, for external consumption
An updated collection of resources targeting browser-exploitation.
An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques
Tutorial on reducing Linux scheduler jitter