Stars
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise ide…
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security,…
This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities found by Portswigger Research team.
Automatic SSRF fuzzer and exploitation tool
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
A python script to scan for Apache Tomcat server vulnerabilities.
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
Static code analysis tool based on Elasticsearch
Open source pre-operation C2 server based on python and powershell
Offensive Software Exploitation Course
A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "wr…
What's your favorite JavaScript single LOC (line of code)?
Pre-Built Vulnerable Environments Based on Docker-Compose
Stuff about it-security that might be good to know
Security Knowledge Framework (SKF) Python Flask / Angular project
POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/
Udaicty Nanaodegree project to display and filter locations and show them in the map
Free and Open Source Enterprise Resource Planning (ERP)
This repository includes the fluentd configuration file to be used to parse logs sent by multiple devices including cisoc ASA