Master programming by recreating your favorite technologies from scratch.

A productivity app that combines pomodoro timers and flow techniques to boost focus and efficiency.

☁️ Live reload for Go apps

OSCP Cheatsheet by Sai Sathvik Ruppa

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

An IIS short filename enumeration tool

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros

Ubuntu 24.04 CIS Benchmark Audit Script

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Security Auditor Utility for GraphQL APIs

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

Automatic SSTI detection tool with interactive interface

Python3 Based gopherus, completely refactored and added more feature.

A semi-interactive PHP shell compressed into a single file.

Most advanced XSS scanner.

Comprehensive notes, cheatsheets, and practical techniques for penetration testing and red teaming.

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Sysmon configuration file template with default high-quality event tracing

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

game of active directory

HTB CDSA Notes I made to reference for the exam.

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

this repo contains complete road map For become a Ethical Hacker For completely for free. Share this repo with your Friends.

completely ridiculous API (crAPI)

Information gathering framework for phone numbers

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool