A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

A list of public penetration test reports published by several consulting firms and academic security groups.

Gather and update all available and newest CVEs with their PoC.

Automate the creation of a lab environment complete with security tooling and logging best practices

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

A huge list of great stuff you can get for free!

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

Chrome browser extension-based Command & Control

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

Active Directory Firewall

ClickForClickOnce - Generate configurable clickonce payloads

Demo code JavaScript POC that tricks user into sending Windows hash to responder