A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Develo…

Collections of Orange Tsai's public presentation slides.

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

This Repository contains the stuff related to windows Active directory environment exploitation

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

Top Ten Web Hacking Techniques List

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

Multi-Architecture GDB Enhanced Features for Exploit Devs & Reversers

Git All the Payloads! A collection of web attack payloads.

A curated list of CTF frameworks, libraries, resources and softwares

Burp plugin able to find reflected XSS on page in real-time while browsing on site

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

Burp Suite Attack Selector Plugin

The most essential list of resources for Front-End beginners (🇺🇸 🇬🇧 & 🇫🇷)

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

An extensible cross-language static code analyzer.