Lists (32)
All in One
1 repository
Android Pentesting
5 repositories
API Pentesting
6 repositories
Awesome Hacking
1 repository
Black Friday Deals
1 repository
Bug Bounty Reports
5 repositories
Bug Bounty Tools
6 repositories
Burp Extenders
2 repositories
Burp Extensions
Cloud Security (Azure)
6 repositories
Devops resources
1 repository
Devsecops
5 repositories
🔮 Future ideas
Interview questions
10 repositories
IOS Pentesting
13 repositories
Mobile Pentesting
3 repositories
Node Security
2 repositories
Nuclei
1 repository
Open Source API Tools
1 repository
Open Source Web PT Tools
1 repository
OSCE Preparation
1 repository
OSWE
1 repository
Pentest Guide
1 repository
Pentesting Cheat Sheets
2 repositories
Red Teaming
2 repositories
Red Teaming checklists
1 repository
Reports
3 repositories
Source Code Review
12 repositories
Telegram Groups
1 repository
Vulnerable Web Applications
2 repositories
Web App Security
For Self Learning31 repositories
Web Services
1 repository
Starred repositories
74
stars
written in Python
Clear filter
📚 Freely available programming books
An opinionated list of Python frameworks, libraries, tools, and resources
All Algorithms implemented in Python
Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
📚 Playground and cheatsheet for learning Python. Collection of Python scripts that are split by topics and contain code examples with explanations.
A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course
Top disclosed reports from HackerOne
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
SSRF (Server Side Request Forgery) testing resources
CTF challenge (mostly pwn) files, scripts etc
Tools & Interesting Things for RedTeam Ops
Extract credentials from lsass remotely
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
Burpsuite Extension to bypass 403 restricted directory
Web vulnerability scanner written in Python3