#1Cybersecurity research, materials, labs, and learning paths, including CTFs and curated educational resources.
Kitploit recommended
sbousseaden/evtx-attack-samplesCurated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…
slsa-framework/slsaSupply-chain Levels for Software Artifacts
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
owasp/securityshepherdWeb and mobile application security training platform
cure53/httpleaksEnumerates all HTML elements and attributes that can leak HTTP requests, enabling testing of browsers, web proxies, and email clients for unintended…
integration-it/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
yosyshq/nextpnrnextpnr portable FPGA place and route tool
m14r41/pentestingeverythingComplete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
imran-parray/mind-mapsMind-Maps of Several Things
owasp/masvsThe OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
bugbasesecurity/pentest-copilotAI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…
eness/php2shell-cve-2026-109618-cve-2026-109619-pocProof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments.…
lucksi/mr.holmesModular OSINT framework for gathering intelligence on domains, usernames, phone numbers, and emails using public sources, Google dorks, and…
wiire-a/pixiewpsAn offline Wi-Fi Protected Setup brute-force utility
tmylla/awesome-llm4cybersecurityCurated systematic literature review of 756+ papers on LLM applications in cybersecurity, covering threat intelligence, vulnerability detection,…
sqlancer/sqlancerAutomated testing to find logic and performance bugs in database systems
