hamed233/cybersecurity-mastery-roadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance
kevin9480/security_incident_reportReact2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트
artemcyberlab/project-ntlm-hash-capture-and-phishing-email-exploitation-for-cve-2024-21413The project was created to demonstrate the use of various tools for capturing NTLM hashes from users on a network and for executing phishing attacks…
rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
a-poc/blueteam-toolsTools and Techniques for Blue Team / Incident Response
trimstray/the-book-of-secret-knowledgeA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
trycatchhcf/dumpsterfire"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events.…
cr0nx/awesome-linux-attack-forensics-purplelabsThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
ic3-512/linux-root-kitEnd-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full…
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
alzeaty1/security-writeupsCTF writeups and teaching scripts for web security, bug bounty techniques, and network forensics, with blank-value versions for active practice.
nvisium-jack-mannino/owasp-goatdroid-project*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and…
joasasantos/osce3-complete-guideCurated study guide for OSCE3 certifications (OSWE, OSEP, OSED, OSEE) covering web exploitation, post-exploitation, payload development, lab setups,…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
arch3rpro/pentest-windows⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
mfthomps/labtainersLabtainers: A Docker-based cyber lab framework
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
