OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

Automatic SQL injection and database takeover tool

WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Veil 3.1.X (Check version info in Veil at runtime)

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

A list of commonly used Git commands

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

A little tool to play with Windows security

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Reconnaissance tool for GitHub organizations

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

A web app that helps you archive and delete old/unused repos, quickly and easily.

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

Notes for some of my tech videos

A Collection of Android Pentest Learning Materials

https://plaintextoffenders.com offenders list

PowerSploit - A PowerShell Post-Exploitation Framework

Network Infrastructure Penetration Testing Tool

The Rogue Access Point Framework