
DVAP
An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

TryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification

This program Prompts you for the Local File Inclusion information and will automatically search the /etc/passwd and using the users names found will…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

A list of interesting payloads, tips and tricks for bug bounty hunters.

Free hands-on digital forensics labs for students and faculty

Curated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…

Linux enumeration tool for pentesting and CTFs with verbosity levels

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

Automated steganalysis platform that detects hidden data in images using 16 parallel analyzers, bit-layer visualization, and an in-app wiki for CTF…

Cross-platform security toolkit for encoding, classical and modern cryptography, hash computation, and online reconnaissance queries, designed for…