This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

A curated list of tools for incident response

Git All the Payloads! A collection of web attack payloads.

Scalable Automated Adversary Emulation Platform

A comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2020

Open Cyber Threat Intelligence Platform

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

VirusTotal Wanna Be - Now with 100% more Hipster

Awesome Node.js Security resources

A list of resources in different fields of Computer Science (multiple languages)

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries.

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

The all-in-one Red Team extension for Web Pentester 🛠

Web app that provides basic navigation and annotation of ATT&CK matrices

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

Sample queries for Advanced hunting in Microsoft 365 Defender

Human-First AI solves the “cold-start” problem of Industrial AI: encoding human expertise to augment the lack of data, while bridging to powerful ML—based on experience building AI solutions at Panasonic: robotics predictive maintenance, cold-chain energy optimization, Gigafactory battery mfg, avionics, automotive cybersecurity, and more.

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.