A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and re…

This is a companion to the Security Engineer Questions

A full English version of the popular ctf-wiki

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

Automated API security testing

🚀 Ideas for everyone under a CC licence. Feel free to use. I'll send you a postcard if you build anything on this list.

A collaborative, multi-platform, red teaming framework

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Firmware Analysis Tool

Awesome secure by default libraries to help you eliminate bug classes!

A list of semi to fully remote-friendly companies (jobs) in tech.

📦 Make security testing of K8s, Docker, and Containerd easier.

the paranoid open-source malware scanner

jsoup: the Java HTML parser, built for HTML editing, cleaning, scraping, and XSS safety.

Exploit Development and Reverse Engineering with GDB Made Easy

API Security Project aims to present unique attack & defense methods in API Security field

eBPF - extended Berkeley Packet Filter tooling

AI featured threat modeling and security review action

Mind-Maps of Several Things

Catch common Java mistakes as compile-time errors

Security contract types

Impacket is a collection of Python classes for working with network protocols.

Simple DNS Rebinding Service

Social platform for developers to network, create and challenge themselves