1489934 matches found
wstg
OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Project® OWASP® Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...
Pentest-Everything
⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...
public-pentesting-reports
Public penetration testing reports A repository containing public penetration test reports published by consulting firms and academic security groups. Maintained by Julio @ Blaze Information Security https://www.blazeinfosec.com. Based on a list started in 2015 by Arne Padmos. See this repo for a...
dirtyc0w
dirtyc0w Checkout the Website for more details : https://dirtycow.ninja/ Wiki : https://github.com/h3x0v3rl0rd/dirtyc0w/wiki...
cve-2020-15148
cve-2020-15148 cve-2020-15148...
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents Description Download & Run Linux & Mac Windows Powershell Usage Instructions Take the challenge Troubleshooting Solutions Contributing...
semgrep
Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...
brave-browser
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
macOS_security_audit
🔒 macOS Security Audit A Bash-based security auditing toolkit for macOS that checks system hardening settings against CIS Benchmark recommendations and generates JSON/HTML reports. Created by Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Overview This toolkit consists of two scripts:...
Brutal
Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...
kickthemout
KickThemOut KickThemOut - Kick Devices Off Your Network A tool to kick devices out of your network and enjoy all the bandwidth for yourself. It allows you to select specific or all devices and ARP spoofs them off your local area network. Compatible with Python 3+ 🎉. Not compatible with Windows...
sshfinder
sshfinder Find every SSH service on your network, judge whether it meets your standard, and get told when that changes. sshfinder is a single Python file with no required dependencies. Point it at a CIDR range and it discovers SSH wherever it is actually listening — not just port 22 — confirms ea...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...
clawguard
🦞 ClawGuard v3 Enterprise AI Agent Security Toolkit - SKILL.md Driven Active Defense Core Concept The core defense of ClawGuard v3 is not in the code, but in SKILL.md! Each module's SKILL.md itself is a complete defense guide: Tells the Agent when to trigger Guides the Agent how to detect Provide...
sitrep
SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...
bitcoder-v2-research
BitCoder-v2 Research Organization: Bytepro AI Status: Active research — private repository Target: arXiv Q3 2026 + ARC Prize Paper Track Nov 2026 Research Objective Empirically document that the single-prompt ceiling observed in mathematical reasoning SAIR, arXiv:2504.18897 replicates in code...
CVE-2021-2394
CVE-2021-2394...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
tirith
tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...