ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (20 features). Perfect for investigators,…

Uncover the true IP address of websites safeguarded by Cloudflare & Others

The Application Study Tool provides enhanced insights into (classic) BIG-IP products, leveraging best in class open source telemetry tools

Checklist of the most important security countermeasures when designing, testing, and releasing your API

JA4+ is a suite of network fingerprinting standards

The Ultimate Information Gathering Toolkit

All-in-One Toolkit for BruteForce Attacks

Collection of publicly available IPTV channels from all over the world

XSSpector: A powerful tool for detecting XSS vulnerabilities in web apps. Advanced detection, customizable payloads, proxy support, and cookie management. Open-source and free to use.

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

📚 Freely available programming books

Next version of roadmap.sh

A collection of several hundred online tools for OSINT

A Collection of application ideas which can be used to improve your coding skills.

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.

Bypass 403

Unveiling the Hidden Layers of the Web – A Comprehensive Web Reconnaissance Tool

The Ultimate URL Masking Tool - An open-source URL masking tool designed to help you Hide Phishing URLs and make them look legit using social engineering techniques.

Android malware (.apk) can be spread through a fake PDF document by manipulating the file extension in the WhatsApp application. PoC is available in this repo

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Take a list of domains and probe for working HTTP and HTTPS servers

CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

Reference implementation of OpenID Connect integration for NGINX Plus

List of awesome app ideas