🐶 A curated list of Web Security materials and resources.
Repository Index
47,133 repositories indexed
121–144 of 967 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
- cybersecurity
- zero-trust
- zero-trust-network-access
- zero-trust-security
Nmap - the Network Mapper. Github mirror of official SVN repository.
- c-plus-plus
- lua
- security
- port-scanner
GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
Force Remove Copilot, Recall and More in Windows 11
TranslatedA code security guide compiled for developers
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Exploitation Framework for Embedded Devices
A vulnerability scanner for container images and filesystems
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
- claude-code
- claude-code-system-prompts
- system-prompts
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
- yubikey
- gpg
- gnupg
- ssh
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
OSS-Fuzz - continuous fuzzing for open source software.
IronClaw is an Agent OS focused on privacy, security and extensibility
- codeact
- openclaw
- rlm
- rust
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
An HTTP toolkit for security research.
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
A list of resources for those interested in getting started in bug bounties
- bug-bounty-hunters
- hackers
- xss
- bug-bounty
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.