A list of useful payloads and bypass for Web Application Security and Pentest/CTF

scikit-learn: machine learning in Python

General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software.

Embedded graphics library to create beautiful UIs for any MCU, MPU and display type.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Simple animated GIF screen recorder with an easy to use interface

An HTTP toolkit for security research.

A collection of android security related resources

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

All about bug bounty (bypasses, payloads, and etc)

A list of interesting payloads, tips and tricks for bug bounty hunters.

Scanning APK file for URIs, endpoints & secrets.

Iceman Fork - Proxmark3

Simple unit testing for C

Protect your data against global mass surveillance programs.

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

jQuery Terminal Emulator - JavaScript library for creating web-based terminals with custom commands

My experiments in weaponizing Nim (https://nim-lang.org/)

Wireless keystroke injection attack platform

LSPass: Bypass restrictions on non-SDK interfaces

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

A big list of Android Hackerone disclosed reports and other resources.

Download extensions and themes directly from Spicetify

Awesome Hacker News: a collection of awesome Hacker News apps, libraries, resources and shiny things.

Acesse seus extratos do Nubank pelo Python

Antivirus evasion project

pwninit - automate starting binary exploit challenges

Deep ghidra decompiler and sleigh disassembler integration for rizin