Ghost Security's collection of AppSec skills for AI coding agents

Architect-grade diagnostic engine for Windows Autopilot logs.

Simulation, Training and Red Team Phishing Framework

Aranya user library, daemon, and policy code

Automation to assess the state of your M365 tenant against CISA's baselines

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

Zero shot vulnerability discovery using LLMs

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

Flipper Zero Unleashed Firmware

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues invo…

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues i…

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilginx3 + gophish

Azure and AWS Attacks

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Revolution Populi Core Blockchain project

A curated list of awesome Ethereum security references

A guide to smart contract security best practices