📚 Freely available programming books

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

Zulip server and web application. Open-source team chat that helps teams stay productive and focused.

Turn (almost) any Python command line program into a full GUI application with one line

The Rogue Access Point Framework

Web path scanner

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Incredibly fast crawler designed for OSINT.

The recursive internet scanner for hackers. 🧡

A swiss army knife for pentesting networks

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Python client for Baidu Yun (Personal Cloud Storage) 百度云/百度网盘Python客户端

🤖 wukong-robot 是一个简单、灵活、优雅的中文语音对话机器人/智能音箱项目，支持ChatGPT多轮对话能力，还可能是首个支持脑机交互的开源智能音箱项目。

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

The perfect emulation setup to study and develop the Linux kernel, kernel modules, QEMU, gem5 and x86_64, ARMv7 and ARMv8 userland and baremetal assembly, ANSI C, C++ and POSIX. GDB step debug and …

Multi-vendor library to simplify Paramiko SSH connections to network devices

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Mimikatz implementation in pure Python

💼 Change your MAC address for debugging

Find leaked secrets via github search

Misago is fully featured modern forum application that is fast, scalable and responsive.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks