amass

In-depth Attack Surface Mapping and Asset Discovery

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-infosec

A curated list of awesome infosec courses and training resources.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

breach-parse

A tool for parsing breached passwords

bug-bounty-toolz

BBT - Bug Bounty Tools

cybermonk3y

dfir-tools

This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

evtx-attack-samples

Windows Events Attack Samples

free_cybersecurity_professional_development_resources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

google-cloud-4-words

The Google Cloud Developer's Cheat Sheet

hmaverickadams-beginner-network-pentesting

imdb_data_import_elastic

infosec-jupyterthon

A community event for security researchers to share their favorite notebooks

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

malware-samples

Malware samples, analysis exercises and other interesting resources.

mindmaps_all

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

mindmapstream

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

pentest-dropbox-setup

powershell-profile

Pretty PowerShell that looks good and functions almost as good as Linux terminal

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerup

This version of PowerUp is now unsupported. See https://github.com/Veil-Framework/PowerTools/tree/master/PowerUp for the most current version.

practical-ethical-hacking-faq

FAQ Guide for Practical Ethical Hacking Udemy Course

probable-wordlists

Wordlists sorted by probability originally created for password generation and testing

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data