A curated list of Smart Contract Security materials and resources For Researchers

Phone specifications API

Scanning APK file for URIs, endpoints & secrets.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Mastering Python for Networking and Security published by Packt

30 days of JavaScript programming challenge is a step-by-step guide to learn JavaScript programming language in 30 days. This challenge may take more than 100 days, please just follow your own pace.

Newman is a command-line collection runner for Postman

Codebase to generate an msdt-follina payload

A curated list of various bug bounty tools

Dark Web OSINT Tool

A collection of manifests that will create pods with elevated privileges.

Curated list of public penetration test reports released by several consulting firms and academic security groups

Java RMI Vulnerability Scanner

Smart context-based SSRF vulnerabiltiy scanner.

Practical example of the Reentrancy attack and how to protect against it

Tutorials and Things to Do while Hunting Vulnerability.

Telegram | Public release of Telepathy, an OSINT toolkit for investigating Telegram chats.

BurpUtils

an intentionally vulnerable serverless web application

Get the standardized technical specifications of the world's smartphones, tablets, smartwatches and more.

credits to Kyle Benac (B3nac/ InjuredAndroid)

Mind-Maps of Several Things

A REST API security testing framework.

List DTDs and generate XXE payloads using those local DTDs.

Lab for exploring SSRF vulnerabilities

You can check below blog post on attacks related to azure storage.

A modern vulnerable web app with ajax API

Get IP address on other side audio call in Telegram.

Hack-the-Box-OSCP-Preparation