A minimal, responsive, and feature-rich Jekyll theme for technical writing.

A list of public penetration test reports published by several consulting firms and academic security groups.

Automagically reverse-engineer REST APIs via capturing traffic

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

A Nmap XSL implementation with Bootstrap.

Everything needed for doing CTFs

Certified Red Team Operator

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

OWASP Foundation web repository