A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Set up a personal VPN in the cloud

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

The authentication glue you need.

open-source agentic AI data assistant for the next generation of AI + Data products.

Daemon to ban hosts that cause multiple authentication errors

The Rogue Access Point Framework

Web path scanner

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

🐶 A curated list of Web Security materials and resources.

Exploitation Framework for Embedded Devices

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Scapy: the Python-based interactive packet manipulation program & library.