
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Curated directory of threat intelligence sources, feeds, frameworks, tools, and research for SOC/CTI teams—covering IOCs, STIX/TAXII formats, and…

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

😱 A curated list of amazingly awesome OSINT

Curated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…

Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…

Reproduce DeFi hacked incidents using Foundry.

Official Elastic Skills

Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems

Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage…

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering,…

Trail of Bits Testing Handbook - appsec.guide

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

A collection of various awesome lists for hackers, pentesters and security researchers

A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.

A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.