nebelschwaden

You-Dont-Know-JS

A book series on JavaScript. @YDKJS on twitter.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Depix

Recovers passwords from pixelized screenshots

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

goproxy

An HTTP proxy library for Go

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

shadowbroker

The Shadow Brokers "Lost In Translation" leak

builderbook

Open source web application to learn JS stack: React, Material-UI, Next.js, Node.js, Express.js, Mongoose, MongoDB database.

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

My-CTF-Web-Challenges

Collection of CTF Web challenges I made

RE-iOS-Apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

fibratus

Adversary tradecraft detection, protection, and hunting

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

XSSChallengeWiki

Welcome to the XSS Challenge Wiki!

hash_extender

SecurityTips

Coldfire

Golang malware development library

PoC

Advisories, proof of concept files and exploits that have been made public by @pedrib.

Facebook-BugBounty-Writeups

Collection of Facebook Bug Bounty Writeups

webscan

Browser-based network scanner & local-IP detection

freki

:wolf: Malware analysis platform

bucky

Bucky (An automatic S3 bucket discovery tool)

memexec

A library for loading and executing PE (Portable Executable) from memory without ever touching the disk

Malware-detection-using-Machine-Learning

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git PoC