Efficient, extensible, flexible, open source vulnerability scanning.


Introduction

Nuclei is a fast, efficient, and extensible vulnerability scanner. It can scan thousands of hosts in just a few minutes.

The Nuclei engine uses YAML-based templates to define…

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers - fkasler/cuddlephish

An OSINT tool that helps detect members of a company with leaked credentials - infobyte/emploleaks

Microsoft ICSpector (ICS Forensics Tools framework) is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. - microsoft/ics-forensics-tools

RedTeaming TTPs
Bug Hunting
Web PenTest
Web Security
Binary Analysis
Exploit DEV
Malware DEV
Malware Analysis
BlueTeaming
Threat Hunting
SOC
CSIRT
FORENSICS
Open-Source Intelligence(OSINT)
Cybersec Tools

Blazing fast GraphQL discovery & fingerprinting toolbox. - Escape-Technologies/goctopus

HEGO Offensive Cybersecurity Wiki

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters - TheWover/donut

NVISO enjoys an excellent working relationship with SANS and has been involved as Instructors and Course Authors for a variety of their courses: For SEC511, Continuous Monitoring and Security Opera…

Interesting APT Report Collection And Some Special IOCs - blackorbird/APT_REPORT

On August 24th, 2022, we reported a vulnerability to Netlify affecting their Next.js "netlify-ipx" repository which would allow an attacker to achieve persistent cross-site scripting and full-response server side request forgery on any website out of the…

Catching a reverse shell over netcat is great…until you accidentally Ctrl-C and lose it. These techniques let you upgrade your shell to a proper TTY

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.

Contribute to razzorsec/AuditorsRoadmap development by creating an account on GitHub.

In this repository I'll host my research and methodologies for auditing vulnerabilities - GitHub - OlivierLaflamme/Auditing-Vulnerabilities: In this repository I'll host my researc...

A collection of write-ups and walkthroughs of my adventures through https://hackthebox.eu. Includes retired machines and challenges.

Vulnerable Code Snippets. Contribute to bughuntar/Vulnerable-Code-Snippets development by creating an account on GitHub.

RedTeaming TTPs
Bug Hunting
Web PenTest
Web Security
Binary Analysis
Exploit DEV
Malware DEV
Malware Analysis
BlueTeaming
Threat Hunting
SOC
CSIRT
FORENSICS
Open-Source Intelligence(OSINT)
Cybersec Tools

A collection of smart contract vulnerabilities along with prevention methods - kadenzipfel/smart-contract-vulnerabilities