Lists (32)
API
AppSec
Appsec Training
Burp Extensions
Burp Extensions Development
Cloud
Data and Crypto
Data Identification and Manipula
Defense
Design
Detection And Forensics (DFIR)
Discovery, OSINT, Fingerprinting
Exploitation
Fuzz
Hiring and Recruiting
HTTP Scanners and DAST
IoT
Learning
Machine Learning and AI
Mobile
Network Scanners
Networking and Network Scans
Passwords
Pentest/Social
Personal and Productivity
Python
Reporting and Documentation
Resources and Standards
Reverse Engineering
SAST and Secret Scanning
Utility
Wordlists and Parsing
Stars
A list of public penetration test reports published by several consulting firms and academic security groups.
8 Lessons, Kick-start Your Cybersecurity Learning.
HTTPLeaks - All possible ways, a website can leak HTTP requests
A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.
An HTTP and WebSocket "echo" server for testing proxies and HTTP clients.
Helping junior developers navigate the complex world of software engineering without experiencing information overload.
A vast collection of security tools and resources curated by the community.
MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.
This repository contains some of the most exhaustive wordlists for enumeration, gathered from a lot of wordlists available on the Internet.
A Django web application for curating Bug Bounty educational Videos