
Agentic-Evidence
OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

Curated SIEM queries and techniques for offensive discovery of Windows privilege escalation, misconfigured ACLs, services, scheduled tasks, and…

CVE intelligence pipeline that compares public CVEs against Nuclei templates to identify missing vulnerability coverage, classify types, and rank…

Clusters and elements to attach to MISP events or attributes (like threat actors)

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

The most exhaustive list of reliable DNS resolvers.

Draw.io libraries for threat modeling diagrams

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability…

A list of awesome penetration testing tools and resources.

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should…

Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…

😎 Awesome list of all things related to Microsoft Entra

Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research

A tool to generate and maintain wordlists for Web fuzzing.

OWASP tool for systematic threat modeling using the Model Context Protocol to identify and mitigate security risks in software architecture.