A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Deployment scripts & config for Sock Shop

A collection of various awesome lists for hackers, pentesters and security researchers

An simplified e-commerce using top technologies to support high availability.

A workflow visualization tool for OpenStack Mistral (https://github.com/openstack/mistral)

Source code for the 2022 DEF CON Qualifiers.

Attack and defend active directory using modern post exploitation adversary tradecraft activity

HUB REST API Python bindings

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Jenkins Pipeline Shared Library Template

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

Open source release of challenges and other code used in the 2020 Hack-a-Sat Qualifier.

Damn Vulnerable NodeJS Application

An insecure example application

Damn Vulnerable Java (EE) Application

Damn Vulnerable Python Web App

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Awesome tools to exploit Windows !