A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Set up a personal VPN in the cloud

The authentication glue you need.

open-source agentic AI data assistant for the next generation of AI + Data products.

Daemon to ban hosts that cause multiple authentication errors

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Web path scanner

The Rogue Access Point Framework

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

🐶 A curated list of Web Security materials and resources.

Exploitation Framework for Embedded Devices

Scapy: the Python-based interactive packet manipulation program & library.

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Main Sigma Rule Repository

🛡️ Open-source and cloud-native Web Application Firewall (WAF)