Hunt down social media accounts by username across social networks

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Fast web fuzzer written in Go

Web path scanner

Exploitation Framework for Embedded Devices

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Damn Vulnerable Web Application (DVWA)

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Gather and update all available and newest CVEs with their PoC.

🔥 Web-application firewalls (WAFs) from security standpoint.

An HTTP toolkit for security research.

A list of interesting payloads, tips and tricks for bug bounty hunters.

All about bug bounty (bypasses, payloads, and etc)

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

A curated list of GPT agents for cybersecurity

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.