Hunt down social media accounts by username across social networks

Damn Vulnerable Web Application (DVWA)

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Exploitation Framework for Embedded Devices

Web path scanner

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

A list of interesting payloads, tips and tricks for bug bounty hunters.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Fast web fuzzer written in Go

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

All about bug bounty (bypasses, payloads, and etc)

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

🔥 Web-application firewalls (WAFs) from security standpoint.

Open Source Vulnerability Management Platform

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Gather and update all available and newest CVEs with their PoC.

A curated list of awesome infosec courses and training resources.