API-Security
owasp/api-securityOWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.
api-securitycurated-resourceseducation+3
2.4k
owasp/api-securityOWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.
center-for-threat-informed-defense/adversary_emulation_libraryAn open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
renniepak/cspbypassCSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…
ice-wzl/hackneticsContained is all my reference material for my OSCP / Red Teaming. Designed to be a one stop shop for code, guides, command syntax, and high level…
mandiant/threatpursuit-vmThreat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and…
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
sbousseaden/evtx-attack-samplesCurated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…
persistence-info/persistence-info.github.ioCurated reference of Windows persistence mechanisms across registry, scheduled tasks, services, and more, designed to improve protection and…
ibnaleem/rulesCurated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack complex passwords…
emrekybs/draculaosDracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber Intelligence missions.
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
roxanne_ardary/quantumlockQuantumLock is an open-source, quantum-resistant Bitcoin protocol designed to protect digital assets from future quantum computing threats. Featuring…
nu11secur1ty/pythonCurated collection of Python scripts and tutorials for penetration testing, web security, and exploitation techniques, designed for security…
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
bst04/cybersourcesA curated list of cybersecurity tools and resources.
ignitetechnologies/privilege-escalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.