🐛 A list of writeups from the Google VRP Bug Bounty program

Leaf - Jekyll Theme

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Checklist for container security - devsecops practices

Collection of Cyber Threat Intelligence sources from the deep and dark web

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

A collection of ZAP scripts provided by the community - pull requests very welcome!

🔥 Everything about web-application firewalls (WAF).

A static analysis security vulnerability scanner for Ruby on Rails applications

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Simple script tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com

Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations

Single-file PHP shell

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

CVE-2020-9484 Mass Scanner, Scan a list of urls for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE