Automatic SQL injection and database takeover tool

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

Web path scanner

hydra

A swiss army knife for pentesting networks

A collection of open source and commercial tools that aid in red team operations.

Automated pentest framework for offensive security experts

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Directory/File, DNS and VHost busting tool written in Go

An Information Security Reference That Doesn't Suck

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

This is a multi-use bash script for Linux systems to audit wireless networks.

Fast web fuzzer written in Go

Collaborative Penetration Test and Vulnerability Management Platform

Next generation web scanner

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Web Pentesting Fuzz 字典,一个就够了。

Wiki to collect Red Team infrastructure hardening resources

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Automated All-in-One OS command injection and exploitation tool.

The LAZY script will make your life easier, and of course faster.

Cameradar hacks its way into RTSP videosurveillance cameras

The Leading Security Assessment Framework for Android.

Automated decryption tool

A high performance offensive security tool for reconnaissance and vulnerability scanning

Automated Phishing Tool & Information Collector

Faster Nmap Scanning with Rust

The cheat sheet about Java Deserialization vulnerabilities