A book series (2 published editions) on the JS language.

FastAPI framework, high performance, easy to learn, fast to code, ready for production

Ghidra is a software reverse engineering (SRE) framework

The Magic Mask for Android

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

GFPGAN aims at developing Practical Algorithms for Real-world Face Restoration.

Beautiful static documentation for your API

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Mastering Bitcoin 3rd Edition - Programming the Open Blockchain

A collection of awesome penetration testing resources, tools and other shiny things

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar…

One second to read GitHub code with VS Code.

Find, verify, and analyze leaked credentials

Checklist of the most important security countermeasures when designing, testing, and releasing your API

A little tool to play with Windows security

A collection of hacking / penetration testing resources to make you better!

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Most advanced XSS scanner.

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Incredibly fast crawler designed for OSINT.

A list of public penetration test reports published by several consulting firms and academic security groups.

🎤⌨️ Acoustic keyboard eavesdropping

📱 objection - runtime mobile exploration

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

The modern Java bytecode editor

A list of interesting payloads, tips and tricks for bug bounty hunters.