Lists (32)
Sort Name ascending (A-Z)
All in One
Android Pentesting
API Pentesting
Awesome Hacking
Black Friday Deals
Bug Bounty Reports
Bug Bounty Tools
Burp Extenders
Burp Extensions
Cloud Security (Azure)
Devops resources
Devsecops
🔮 Future ideas
Interview questions
IOS Pentesting
Mobile Pentesting
Node Security
Nuclei
Open Source API Tools
Open Source Web PT Tools
OSCE Preparation
OSWE
Pentest Guide
Pentesting Cheat Sheets
Red Teaming
Red Teaming checklists
Reports
Source Code Review
Telegram Groups
Vulnerable Web Applications
Web App Security
For Self LearningWeb Services
Starred repositories
📚 Freely available programming books
An opinionated list of awesome Python frameworks, libraries, software and resources.
All Algorithms implemented in Python
Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
📚 Playground and cheatsheet for learning Python. Collection of Python scripts that are split by topics and contain code examples with explanations.
A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…
A GPT-empowered penetration testing tool
Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
Top disclosed reports from HackerOne
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
SSRF (Server Side Request Forgery) testing resources
CTF challenge (mostly pwn) files, scripts etc
Tools & Interesting Things for RedTeam Ops
Extract credentials from lsass remotely
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
Burpsuite Extension to bypass 403 restricted directory
Web vulnerability scanner written in Python3
A Python 3 programming tutorial for beginners.