End-to-end agentic smart contract fuzzing and threat hunting

خلاصه فصل‌ ها، نکات کلیدی و مفاهیم کاربردی کتاب با تمرکز بر درک عمیق‌ تر لینوکس.

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing, and testing for common vulnerabilities such as SQLi, IDOR, …

A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb.

Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more.

Collection of handy online tools for developers, with great UX.

A collection of various awesome lists for hackers, pentesters and security researchers

Solutions for all the WebSecurityAcademy with Videos

Top disclosed reports from HackerOne

This is the companion repo for a copy of all code, references, and extras noted by the Evasion Engineering book from NoStarch Publishing by Dennis Chow and Michael LaSalvia

AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, m…

The comprehensive guide for online anonymity and OpSec.

Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

MITM Field Manual

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

101 Linux commands Open-source eBook and CLI tool

learn docker in your terminal, with bite sized exercises

A Bash script to automate the initial configuration and security hardening of Debian and Ubuntu servers.

Best and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price drops, restock alerts, and website defacement monito…

A list of all Active Directory machines from HackTheBox

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Indirect-Shellcode-Executor expoits the miss-configuration/vulnerability present on the API Windows method ReadProcessMemory discovered by DarkCoderSc. It exploits the nature of the in/out pointer …

Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation

This is a local search engine to search for cybersecurity tools. It has 3000+ tools in it's database.