DevSecOps training, application code

Pre-Built Vulnerable Environments Based on Docker-Compose

A small collection of vulnerable code snippets

Ultimate DevSecOps library

All about bug bounty (bypasses, payloads, and etc)

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask modu…

Go alternative of python SimpleHTTPServer

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Cloud Security Posture Management (CSPM)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet

BugBountyTips

Various *nix tools built as statically-linked binaries

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

🛡️ Awesome Cloud Security Resources ⚔️

WebGoat is a deliberately insecure application

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Small and highly portable detection tests based on MITRE's ATT&CK.

Modified template for the OSCP Exam and Labs. Used during my passing attempt

A curated list of awesome Kubernetes security resources

anchore security for your images

Monitor linux processes without root permissions

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the…