Open source programming education

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file for…

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

Pentesting Reporting Tool

AADInternals PowerShell module for administering Azure AD and Office 365

A list of public penetration test reports published by several consulting firms and academic security groups.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

End-to-end modular samples and landing zones toolkit for Terraform on GCP.

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

Automated NoSQL database enumeration and web application exploitation tool.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.