One system to rule them all.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Questions to ask the company during your interview

Bugcrowd’s baseline priority ratings for common security vulnerabilities

Open source education content for the researcher community

The Hunting ELK

⭐️ A curated list of awesome forensic analysis tools and resources

stuff i'm willing to share with the world lol

My dotfiles. Buyer beware ;)

Docker template for running NWNXEE

Active Directory Assessment and Privilege Escalation Script

ShellCheck, a static analysis tool for shell scripts

An information security preparedness tool to do adversarial simulation.

Collection of steganography tools - helps with CTF challenges

PEDA - Python Exploit Development Assistance for GDB

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

Sickle - Payload Development Kit

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Pentest Scripts

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Scripted Local Linux Enumeration & Privilege Escalation Checks

Software to identify the different types of hashes -

Collection of things made during my OSCP journey

NSE script based on Vulners.com API

Subdomain enumeration tool