Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise ide…

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

Tools and Techniques for Red Team / Penetration Testing

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

Educational platform for OWASP Top 10 2025 vulnerabilities — deliberate vulnerable labs built on a fictional SaaS app (Nexo)

An updated look at the Open Web Application Security Project’s (OWASP) list of the ten most critical web application security risks. It highlights modern vulnerabilities like Broken Access Control,…

A list of web application security

AI-powered bug bounty hunting toolkit that works with or without subscription.

A powerful open-source cybersecurity toolkit for security professionals and enthusiasts. Includes password auditing, cryptographic utilities, network OSINT, and payload generation.

A next-generation crawling and spidering framework.

Damn Vulnerable Web Application (DVWA)

A collection of Awesome Google Dorks.

Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense + Suricata, and a Wazuh SIEM. It provides a realistic, ope…

A collection of awesome penetration testing resources and tools

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

This is the repository of my personal notes taken during Jeremy's IT Lab Complete CCNA 200-301 course

a list of 390+ Free TryHackMe rooms to start learning cybersecurity with THM

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, …

Open source education content for the researcher community

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

All about bug bounty (bypasses, payloads, and etc)

Top disclosed reports from HackerOne

📌 A guide for amateurs pen testers and a summary of hacking tools to practice ethical hacking, pen testing and web security.

This Repo will help you to prepare better for CEH - Practical Exam

A collection of hacking tools, resources and references to practice ethical hacking.