Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection

TUDO — A Vulnerable PHP Web App

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

Java deserialization exploitation lab.

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

This is a step-by-step guide to implementing a DevSecOps program for any size organization

Information about web3 security and programming tutorials/tools

This repository contains free labs for setting up an entire workflow and DevOps environment from a real-world perspective in Azure

OSWE, OSEP, OSED, OSEE

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

Purposely-vulnerable Python functions

A collection of various awesome lists for hackers, pentesters and security researchers

Small and highly portable detection tests based on MITRE's ATT&CK.

A collection of awesome penetration testing resources, tools and other shiny things

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileg…

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Files for YouTube crash course

grep rough audit - source code auditing tool

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

A list of public penetration test reports published by several consulting firms and academic security groups.

This script grab public report from hacker one and make some folders with poc videos

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Machine Learning for Cyber Security

Reverse Engineering materials for bootcamp 2020

Rails Girls Guides

freeCodeCamp.org's open-source codebase and curriculum. Learn math, programming, and computer science for free.