A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
59,621 visible repositories in the index
1–24 of 26 · Most stars
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
- hacking
- penetration-testing
- hacking-series
- cybersecurity
Source code for Hacker101.com - a free online web and mobile security class.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
- pentesting-tools
- vulnerability-scanners
- redteam-tools
- penetration-testing
Gather and update all available and newest CVEs with their PoC.
- poc
- cve
- cve-poc
- latest-cve
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Collection of methodology and test case for various web vulnerabilities.
- vulnerability
- tutorials
- bughunting-methodology
- bugbounty
A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
All about bug bounty (bypasses, payloads, and etc)
- bugbounty
- bugbountytips
- bypass
- payloads
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
- springboot
- springboot-actuator-rce
- rce
- spring-boot-vulnerability
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
- awesome-list
- awesome
- fuzzing
- fuzzing-framework
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Tools and Techniques for Blue Team / Incident Response
- blue-team
- blueteam
- cheatsheet
- incident-response
An step by step fuzzing tutorial. A GitHub Security Lab initiative
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
- penetration-testing
- hacking
- learning-hacking
- web-hacking
Potentially dangerous files
- list
- web
- vulnerability
- files
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Checklist of security precautions for Ruby on Rails applications.
- ruby
- ruby-on-rails
- rails
- security
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.
- awesome-list
- code-security
- large-language-models
- llm
Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks
- cybersecurity
- newsletter
Linux Binary Exploitation
- linux
- binaries
- exploitation
- stackoverflow
Learn about a type of vulnerability that specifically targets machine learning models