Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Django styleguide used in HackSoft projects

AWS CloudWatch logs for Humans™

CMS framework for Django

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Arsenal is just a quick inventory and launcher for hacking programs

Phishing Campaign Toolkit

IAM Least Privilege Policy Generator

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

⛔ offsec batteries included

AWS Least Privilege for Distributed, High-Velocity Deployment

Collection of Proof of Concepts and Potential Targets for #ShellShocker

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

Scan DockerHub images that match a keyword to find secrets.

Enumerate URL schemes on macOS and Windows

Site da PyconPE