modulexcite

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

building-secure-contracts

Guidelines and training material to write secure smart contracts

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cyberchef-recipes

A list of cyber-chef recipes and curated links

echidna

Ethereum smart contract fuzzer

etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

every-programmer-should-know

A collection of (mostly) technical things every software developer should know about

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

fibratus

A modern tool for the Windows kernel exploration and tracing

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

InstallerFileTakeOver

js-unit-testing-guide

📙 A guide to unit testing in Javascript

nginxconfig.io

⚙️ NGINX config generator on steroids 💉

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

osv

Open source vulnerability DB and triage service.

postmortem-templates

A collection of postmortem templates

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

SharpSocks

Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell

slither

Static Analyzer for Solidity

Sourcetrail

Sourcetrail - free and open-source interactive source explorer

ssh-mitm-1

ssh mitm server for security audits supporting public key authentication, session hijacking and file manipulation

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

system-design-interview

System design interview for IT companies

WADComs.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

WebJobs

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows.