
Penetration-Testing-Tools
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…

Awesome information for WebSockets security research

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

Curated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.

An updated collection of resources targeting browser-exploitation.

Differential testing framework for HTTP implementations

A collection of links related to VMware escape exploits

System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)

Collection of CVE(work) on tenserflow binary pwning it

A collection of exploits for different VoIP products.

Git All the Payloads! A collection of web attack payloads.

Collection of quality safety articles. Awesome articles.

A collection of links related to Linux kernel security and exploitation

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced…

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…

Some setup scripts for security research tools.

MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.

Tools for information gathering