0xf4r

90DaysOfCyberSecurity

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

Microsoft-Flow

Security_Engineer_Interview_Questions

Every Security Engineer Interview Question From Glassdoor.com

Fooocus

Focus on prompting and generating

DragGAN

Unofficial Implementation of DragGAN - "Drag Your GAN: Interactive Point-based Manipulation on the Generative Image Manifold" （DragGAN 全功能实现，在线Demo，本地部署试用，代码、模型已全部开源，支持Windows, macOS, Linux）

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

symbiote

Your target's phone's front and back cameras📸 can be accessed by sending a link🔗.

bruter

Bruter is an OSINT tooling, an experiment to build a reconnaissance simple app to have fun 🕵️‍♂️

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

Windows_LPE_AFD_CVE-2023-21768

LPE exploit for CVE-2023-21768

Malware-Exhibit

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

pentest-book

google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

Cybersecurity-Resources

A Library of various cybersecurity resources

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

GoogleBITB

Awesome-Cloud-PenTest

GCP-IAM-Privilege-Escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Cloud-Pentesting

This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

Stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

HackTools

The all-in-one browser extension for offensive security professionals 🛠

AvillaForensics

Avilla Forensics 3.0

WhatsApp-Key-Database-Extractor

The most advanced and complete solution for extracting WhatsApp key/DB from package directory (/data/data/com.whatsapp) without root access.

2FAGmailPhising

Phising 2FA Gmail

CredSniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

Modlishka

Modlishka. Reverse Proxy.

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program