List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.

This repo contains the source code for the LeoTrace community challenges

Automated red-team toolkit for stress-testing LLM defences - Vector Attacks on LLMs (Gendalf Case Study)

A curated list of tools and resources that I use daily as a Purple-Team operator.

Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing…

This repository contains a comprehensive guide and resources for penetration testing of the DIVA-Beta APK (Damn Insecure and Vulnerable App). It includes detailed walkthroughs of various security v…

my notes

Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Notes about attacking Jenkins servers

Notes created for preparation of EJPTv2

My Security Article space on GitHub dedicated to sharing insights, best practices, and discussions related to cybersecurity, ensuring safer code and applications.

This repository contains a list of roadmaps I created with my suggestions on LinkedIn and Twitter.🤞🏻😌

Penetration Testing Student version 2 simple condensed NOTES for quick recap

OWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)

This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

BChecks collection for Burp Suite Professional and Burp Suite DAST

Stakeholder-Specific Vulnerability Categorization

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

Deliver web apps with confidence 🚀

eLearnSecurity Junior Penetration Tester Certificate (eJPT) PTS Notes

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

AWS Certified Cloud Practitioner Short Notes And Practice Exams (CLF-C02)

Notes compiled based on AWS E-Learning lessons and transcripts

Curated list of public penetration test reports released by several consulting firms and academic security groups

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

Collection of notes to prepare for the eLearnSecurity eJPT certification exam.

This is a curated list of resources about code reviews: articles, tools, trainings...