Small and highly portable detection tests based on MITRE's ATT&CK.

Exploitation Framework for Embedded Devices

Auto-generated code samples for the Twilio REST API

📚 Freely available programming books

A curated list of awesome awesomeness

Curated list of public penetration test reports released by several consulting firms and academic security groups

🐶 A curated list of Web Security materials and resources.

📚 List of awesome university courses for learning Computer Science!

automated penetration toolkit

A curated list of resources for learning about application security

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

Open-source pentesting management and automation platform by Salesforce Product Security

😱 A curated list of amazingly awesome OSINT

Open Penetration Testing Bookmarks Collection

thp2 setup

Set up a personal IPSEC VPN in the cloud

A curated list of amazingly awesome Mac OS X tools, applications and games.

Python SDK to access the vulnerability database

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

An open-source, pentest and developer-oriented web browser, using the power of Lua

jSQL Injection is a Java application for automatic SQL database injection.

A fully featured Windows backdoor that uses Gmail as a C&C server

A curated list of awesome Python frameworks, libraries and software

Various webshells. We accept pull requests for additions to this collection.

A collection of awesome penetration testing resources, tools and other shiny things