A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
75,859 visible repositories in the index
1–24 of 67 · Most stars
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
- hacking
- penetration-testing
- hacking-series
- cybersecurity
🎮 A step-by-step guide to implementing SSAO, depth of field, lighting, normal mapping, and more for your 3D game.
Source code for Hacker101.com - a free online web and mobile security class.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
C++ examples for the Vulkan graphics API
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
- pentesting-tools
- vulnerability-scanners
- redteam-tools
- penetration-testing
Gather and update all available and newest CVEs with their PoC.
- poc
- cve
- cve-poc
- latest-cve
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Collection of methodology and test case for various web vulnerabilities.
- vulnerability
- tutorials
- bughunting-methodology
- bugbounty
A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
All about bug bounty (bypasses, payloads, and etc)
- bugbounty
- bugbountytips
- bypass
- payloads
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
- springboot
- springboot-actuator-rce
- rce
- spring-boot-vulnerability
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
- awesome-list
- awesome
- fuzzing
- fuzzing-framework
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
One stop solution for all Vulkan samples
Tools and Techniques for Blue Team / Incident Response
- blue-team
- blueteam
- cheatsheet
- incident-response
An step by step fuzzing tutorial. A GitHub Security Lab initiative
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
- penetration-testing
- hacking
- learning-hacking
- web-hacking
Awesome Vulkan ecosystem
- vulkan-api
- vulkan-libraries
- opengl
- nvidia
Tutorial for the Vulkan graphics and compute API
This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
- oscp
- oscp-prep
- oscp-journey
- ctf
Potentially dangerous files
- list
- web
- vulnerability
- files