#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
an0nud4y/evilginx-phishing-infra-setupEvilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs
projectdiscovery/awesome-search-queriesCommunity curated list of search queries for various products across multiple search engines.
ncsc-nl/openssl-2022Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3
pop3ret/awsome-pentestingMy cheatsheet notes to pentest AWS infrastructure
six2dez/wahh_extrasThe Web Application Hacker's Handbook - Extra Content
rizemon/exploit-writing-for-osweTips on how to write exploit scripts (faster!)
waf-bypass-maker/waf-community-bypassesCurated CSV collection of community-sourced Web Application Firewall bypass payloads for testing and validating WAF protections.
edr4/xss-bypass-filtersCurated XSS payload collection and filter-bypass cheat sheet: WAF-specific evasion, JS/HTML injection vectors, encoding tricks, DOMPurify and…
owasp/opencreInteractive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…
b1n4r1b01/n-daysCurated collection of iOS kernel and userland exploit PoCs and writeups for in-the-wild and researched CVEs, including binary-diffed vulnerability…
harendra-shakya/smart-contract-attack-vectorsA curated list of smart contract attack vectors
nccgroup/cyber-defenceInformation released publicly by NCC Group's Cyber Incident Response Team
rhboot/shim-reviewReviews of shim
baderj/domain_generation_algorithmsSome results of my DGA reversing efforts
elastic/agent-skillsOfficial Elastic Skills
wack0/bitlocker-attacksA list of public attacks on BitLocker
