Projects for security students

API Security Project aims to present unique attack & defense methods in API Security field

Small and highly portable detection tests based on MITRE's ATT&CK.

A curated list of Chaos Engineering resources.

Awesome Java Security Resources 🕶☕🔐

Install the tools and start Attacking , black-tool v5.0 ! ⬛

Fully featured and community-driven hacking environment

Tips on how to write exploit scripts (faster!)

Offensive Software Exploitation Course

All the deals for InfoSec related software/tools this Black Friday

Hardened debian linux baseimage for Docker.

Kubernetes pentesting, hardening and hunting tools.

An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…

Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have …

Check your WAF before an attacker does this one