Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

A high-performance algorithmic trading platform and event-driven backtester

Comfortably monitor your Internet traffic 🕵️‍♂️

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Collection of awesome LLM apps with AI Agents and RAG using OpenAI, Anthropic, Gemini and opensource models.

🤖 The Modern Port Scanner 🤖

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: …

Find secrets with Gitleaks 🔑

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Edge-Dynamic Unified Security Analysis

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

A Frida script that disables Flutter's TLS verification

Global Proxy for Android

Script to root AVDs running with QEMU Emulator from Android Studio

The Magic Mask for Android

Find, verify, and analyze leaked credentials

Pre-Built Vulnerable Environments Based on Docker-Compose

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

A curated list of amazingly awesome Burp Extensions

Google CTF

A curated list of useful resources for gRPC

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.