awesome-appsec

A curated list of resources for learning about application security

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-linux-containers

A curated list of awesome Linux Containers frameworks, libraries and software

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-serverless-security

A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-threat-modeling

a curated list of useful threat modeling resources

aws-well-architected-labs

Hands on labs and code to help you learn, measure, and build using architectural best practices.

bundler-audit

Patch-level verification for Bundler

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

clair

Vulnerability Static Analysis for Containers

cve-2019-16113

CVE-2019-16113 - bludit >= 3.9.2 RCE authenticate

dnsrecon

DNS Enumeration Script

eyewitness-ruby

This repo is for the Ruby version of EyeWitness

glue

Application Security Automation

hackerinchief

hackerinchief.github.io

A force in cybersecurity education and career development.

hackerone-reports

Top disclosed reports from HackerOne

hashcat

World's fastest and most advanced password recovery utility

infosec_reference

An Information Security Reference That Doesn't Suck

kansa

A Powershell incident response framework

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

logstash

Contains Logstash related content including tons of Logstash configurations

macos-security-and-privacy-guide

Guide to securing and improving privacy on macOS

movies-for-hackers

🎬 A curated list of movies every hacker & cyberpunk must watch.

osinttools

A collection of random OSINT scripts

pacdoor

Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File

passive-spider

Passive Spider uses search engines to find interesting information about a target domain.

pentest-tools-framework

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

personal-security-checklist

🔒 A curated checklist of 100+ tips for protecting digital security and privacy in 2020