Linux kernel source tree

Fast web fuzzer written in Go

Damn Vulnerable NodeJS Application

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

🤖 A framework for building GitHub Apps to automate and improve your workflow

Various Dockerfiles I use on the desktop and on servers.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Vulnerable server used for learning software exploitation

Open-Source Phishing Toolkit

A curated list of resources for learning about application security

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Peer-to-peer hypermedia protocol

Container introspection tool. Find out what container runtime is being used as well as features available.

Ghidra is a software reverse engineering (SRE) framework

A Commander for modern Go CLI interactions

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC. With Cloud, Local and Git storage.

The list of continuous integration services and tools

Automated Adversary Emulation Platform

PowerShell Obfuscator

DKMC - Dont kill my cat - Malicious payload evasion tool

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

Mycroft Core, the Mycroft Artificial Intelligence platform.

Modlishka. Reverse Proxy.

The Hunting ELK

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP,…

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Set of tools to analyze Windows sandboxes for exposed attack surface.