awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...

covertchannels-steganography

Many people ask me how to start in the field of steganography/covert channels or how to improve their skills. I wrote this recopilation to help them with some good references, tools and books that I used and read I will add more soon. Books & Papers/Articles Information Hiding Techniques for...

awesome-security

Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...

privacyguides.org

Your central privacy and security resource to protect yourself online. About Privacy Guides is a socially motivated website that provides information for protecting your data security and privacy. Our mission is to inform the public about the value of digital privacy, and global government...

waldo

Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...

90DaysOfCyberSecurity

90-Day Cybersecurity Study Plan 📚 Table of Contents Introduction Goals and Audience Daily Breakdown Day 1-7: Network+ Concepts Day 8-14: Security+ Concepts Day 15-28: Linux Tutorials Day 29-42: Python Day 43-56: Traffic Analysis Day 57-63: Git Day 64-70: ELK Day 71-77: GCP or AWS or Azure Day...

vulnerable-mcp-servers-lab

Vulnerable MCP Servers Lab This repository contains intentionally vulnerable implementations of Model Context Protocol MCP servers both local and remote. Each server lives in its own folder and includes a dedicated README.md with full details on what it does , how to run it , and how to...

1earn

Everything is hard at the beginning, and then it stays hard... Introduction : The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be...

security-study-plan

A Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps, and so on with free/paid resources, tools, and concepts to excel. It will cover but not limited to: Done 1. Common Skills for Security Study Plan 2. AWS Security...

juice-shop

OWASP Juice Shop The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But this doesn't have anything to do with juice...

awesome-web-security

Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

Awesome-Android-Reverse-Engineering

Awesome Android Reverse Engineering A curated list of awesome Android Reverse Engineering training, resources, and tools. How to Use Awesome-Android-Reverse-Engineering is an amazing list for people who work in taking apart Android applications, systems, or components. Simply press ctrl + F to...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

Bug-Bounty

בס״ד ⚜️ Aภl๏miuภuຮ ⚜️ ⫷ HacKingPro ⫸ ⫷ TryHackMe | KoTH ⫸ ⫷ Privilege-Escalation⫸ ⫷ ScanPro | Linfo | Diablo ⫸ ⫷ Offensive-Security | PenTest ⫸ ⫷ Goals | Studies | HacKing | AnyTeam ⫸ Bug Bounty Awesomes Books Cheatsheets Checklists Tools Wordlists More GitHub Bounty GitHub Security Bug Bounty...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

awesome-entra

Awesome Entra A curated list of awesome Microsoft Entra tools, guides, and other resources. Contents Merill's newsletter & podcast Mind Map Learning Hubs Presentations aka.ms Tools Community YouTube Podcast Bluesky Twitter LinkedIn Blogs Merill's newsletter & podcast Entra.News - Weekly round up...

sectemplates

Sectemplates I'd like to announce the creation of SecTemplates.com, a website where infosec professionals, and startup engineering teams lacking a security team, can find templates to help bootstrap their programs. The primary focus of this site will be to provide starting points for Preparation...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...