🔥 Web-application firewalls (WAFs) from security standpoint.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

AWSGoat : A Damn Vulnerable AWS Infrastructure

AzureGoat : A Damn Vulnerable Azure Infrastructure

Extension to standardize dates and times to the same timezone across social media websites.

Create your own vulnerable by design AWS penetration testing playground

Awesome list of all things oracle manipulation. Creating to help spread a better understanding of oracles and oracle manipulation.

To learn common smart contract vulnerabilities using Foundry!

A collection of smart contract vulnerabilities along with prevention methods.

A cross-platform toolkit for decentralized identity.

The Self Sovereign Identity Service

self sovereign identity sdk

OpenZeppelin Contracts is a library for secure smart contract development.

EVM dissassembler

Reproduce DeFi hacked incidents using Foundry.

A community-maintained collection of bugs, vulnerabilities, and exploits in apps using ZK crypto.

An experimental open-source attempt to make GPT-4 fully autonomous.

Ethereum consensus client in Rust

The most unusual OSINT guide you've ever seen. The repository is intended for bored professionals only. PRs are welcome!

Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript

OWASP API Security Project

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

OSS-Fuzz - continuous fuzzing for open source software.

Information about web3 security and programming tutorials/tools

Top disclosed reports from HackerOne