link-hub

KO | EN

gitlite — search

#javascript #hacktoberfest #react #typescript #llm #go #deep-learning #docker #nodejs #macos #java #pytorch #openai #open-source

(★ 40)

A collection of helpful resources related to Cybersecurity and a lot more.

link-hub 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<p align="center">
<img src=".github/assets/logo.svg" alt="LinkHub Logo" width="250" height="250" />
</p>
<h1 align="center">Cybersecurity Links Dump</h1>

## Table of Contents

- [AI Security](#ai-security)
    - [Labs](#ai-security-labs)
- [Cloud](#cloud)
    - [AWS Security](#cloud-aws-security)
        - [Labs](#cloud-aws-security-labs)
        - [Tools](#cloud-aws-security-tools)
    - [Azure Security](#cloud-azure-security)
        - [Labs](#cloud-azure-security-labs)
        - [Tools](#cloud-azure-security-tools)
    - [CICD Security](#cloud-cicd-security)
        - [Labs](#cloud-cicd-security-labs)
        - [Tools](#cloud-cicd-security-tools)
    - [GCP Security](#cloud-gcp-security)
        - [Labs](#cloud-gcp-security-labs)
        - [Tools](#cloud-gcp-security-tools)
    - [IaC](#cloud-iac)
        - [Tools](#cloud-iac-tools)
    - [Kubernetes Security](#cloud-kubernetes-security)
        - [Labs](#cloud-kubernetes-security-labs)
        - [Tools](#cloud-kubernetes-security-tools)
    - [Labs](#cloud-labs)
    - [Tools](#cloud-tools)
- [Courses](#courses)
- [Cybersecurity](#cybersecurity)
    - [Labs](#cybersecurity-labs)
    - [Resources](#cybersecurity-resources)
- [Infrastructure Security](#infrastructure-security)
    - [Active Directory](#infrastructure-security-active-directory)
    - [Labs](#infrastructure-security-labs)
    - [Linux](#infrastructure-security-linux)
    - [Pentesting](#infrastructure-security-pentesting)
    - [Tools](#infrastructure-security-tools)
- [Mobile Security](#mobile-security)
    - [Labs](#mobile-security-labs)
    - [Tools](#mobile-security-tools)
- [Piracy](#piracy)
- [Productivity & QoL](#productivity-qol)
- [Web Security](#web-security)
    - [Fuzzing](#web-security-fuzzing)
    - [GraphQL](#web-security-graphql)
    - [Labs](#web-security-labs)
    - [Tools](#web-security-tools)

---

# <a id="ai-security"></a> AI Security

| Name | Description |
|------|-------------|
| [ARC PI Taxonomy](https://arcanum-sec.github.io/arc_pi_taxonomy/) | Prompt injection taxonomy |
| [Awesome LLM](https://github.com/Hannibal046/Awesome-LLM) | GitHub - Hannibal046/Awesome-LLM: Awesome-LLM: a curated list of Large Language Model |
| [Awesome LLMOps](https://github.com/tensorchord/Awesome-LLMOps) | GitHub - tensorchord/Awesome-LLMOps: An awesome &amp; curated list of best LLMOps tools for developers |
| [Awesome ML for Cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) | A curated list of amazingly awesome tools and resources related to the use of machine learning for cyber security. |
| [Awesome Prompt Engineering](https://github.com/promptslab/Awesome-Prompt-Engineering) | GitHub - promptslab/Awesome-Prompt-Engineering: This repository contains a hand-curated resources for Prompt Engineering with a focus on Generative Pre-trained Transformer (GPT), ChatGPT, PaLM etc |
| [Deep Learning AI](https://www.deeplearning.ai/) | AI Courses and Specializations |
| [GenAI Agents](https://github.com/NirDiamant/GenAI_Agents) | This repository serves as a comprehensive resource for learning, building, and sharing GenAI agents, ranging from simple conversational bots to complex, multi-agent systems. |
| [OffSecML](https://wiki.offsecml.com/Welcome+to+the+Offensive+ML+Playbook) | Welcome to the Offensive ML Playbook - OffSecML Playbook |
| [Prompt Injection Defenses](https://github.com/tldrsec/prompt-injection-defenses) | GitHub - tldrsec/prompt-injection-defenses: Every practical and proposed defense against prompt injection. |

## <a id="ai-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [AI Goat](https://github.com/dhammon/ai-goat) | vulnerable LLM CTF challenges setup locally |
| [AI Goat](https://github.com/orcasecurity-research/AIGoat) | GitHub - orcasecurity-research/AIGoat: AIGoat: A deliberately Vulnerable AI Infrastructure. Learn AI security through solving our challenges. |
| [Damn Vulnerable MCP](https://github.com/harishsg993010/damn-vulnerable-MCP-server) | The Damn Vulnerable Model Context Protocol (DVMCP) is an educational project designed to demonstrate security vulnerabilities in MCP implementations. It contains 10 challenges of increasing difficulty that showcase different types of vulnerabilities and attack vectors. |

# <a id="cloud"></a> Cloud

| Name | Description |
|------|-------------|
| [Awesome Cloud Labs](https://github.com/iknowjason/Awesome-CloudSec-Labs) | GitHub - iknowjason/Awesome-CloudSec-Labs: Awesome free cloud native security learning labs.  Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs. |
| [Awesome Cloud Sec](https://github.com/RyanJarv/awesome-cloud-sec) | GitHub - RyanJarv/awesome-cloud-sec: Awesome list for cloud security related projects |
| [Cloud Middleware Dataset](https://github.com/wiz-sec/cloud-middleware-dataset) | GitHub - wiz-sec-public/cloud-middleware-dataset; project contains cloud middleware (i.e. agents installed by Cloud providers) used across the major cloud service providers (Azure, AWS and GCP). |
| [Cloud Wiki](https://cloudsecwiki.com/) | Cloud Wiki \| Cloud Wiki |
| [CloudSecDocs](https://cloudsecdocs.com/) | Welcome to CloudSecDocs - CloudSecDocs |
| [Hacking The Cloud](https://hackingthe.cloud/) | Hacking The Cloud |
| [HackTricks Cloud](https://cloud.hacktricks.xyz/) | HackTricks Cloud - HackTricks Cloud |
| [Offensive Cloud TTPs](https://github.com/lutzenfried/OffensiveCloud/tree/main) | GitHub - lutzenfried/OffensiveCloud: Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP) |
| [Security Wiki - Cloud](https://www.secwiki.cloud/) | Cloud Wiki \| CloudWiki |

## <a id="cloud-aws-security"></a> AWS Security

| Name | Description |
|------|-------------|
| [Arsenal of AWS Security Tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) | GitHub - toniblyx/my-arsenal-of-aws-security-tools: List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. |
| [Awesome AWS](https://github.com/donnemartin/awesome-aws) | A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome. |
| [Awesome SCPs](https://github.com/houey/awesome-service-control-policies) | GitHub - houey/awesome-service-control-policies: Listing of resources for example AWS Service Control Policies (SCPs) |
| [AWS Break Glass Role](https://github.com/awslabs/aws-break-glass-role) | GitHub - awslabs/aws-break-glass-role: Create a break glass role for emergency use in order to limit AWS production account access. Configure automatic alerts and logging of activities in the role to secure its use in production environments. |
| [AWS Centralized Logs](https://github.com/aidansteele/centralized-logs) | GitHub - aidansteele/centralized-logs: Centralizing AWS CloudWatch log forwarding via EventBridge and Step Functions |
| [AWS Cheat Sheet](https://github.com/invictus-ir/aws-cheatsheet) | GitHub - invictus-ir/aws-cheatsheet: A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering. |
| [AWS Permissions Reference](https://aws.permissions.cloud/) | Permissions Reference for AWS IAM \| aws.permissions.cloud |
| [AWS Public Account IDs](https://github.com/rupertbg/aws-public-account-ids) | GitHub - rupertbg/aws-public-account-ids: Publicly-listed AWS account IDs for easy lookup. Great for cleaning up false positives from unknown Account IDs in Cloudtrail |
| [AWS RCP Examples](https://github.com/aws-samples/resource-control-policy-examples) | Example AWS Resource control policies to get started or mature your usage of AWS RCPs. |
| [AWS Sample Data Perimeter Policies](https://github.com/aws-samples/data-perimeter-policy-examples) | Examples of SCPs and RCPs to setup data perimeter policies to protect attack surfaces. |
| [AWS SCP Examples](https://github.com/aws-samples/service-control-policy-examples) | GitHub - aws-samples/service-control-policy-examples: Example AWS Service control policies to get started or mature your usage of AWS SCPs. |
| [AWS Security Resource Dump](https://github.com/redskycyber/Cloud-Security/blob/main/AWS-Security-Pentesting-Resources.md) | AWS security resources |
| [AWS Security Survival Kit](https://github.com/zoph-io/aws-security-survival-kit) | GitHub - zoph-io/aws-security-survival-kit: Bare minimum AWS Security Alerting and Configuration |
| [FWD CloudSec - Known AWS Accounts](https://github.com/fwdcloudsec/known_aws_accounts) | GitHub - fwdcloudsec/known_aws_accounts: List of known AWS accounts |
| [Pathfinding.Cloud](https://github.com/DataDog/pathfinding.cloud) | pathfinding.cloud is a comprehensive, community-maintained library documenting AWS IAM privilege escalation paths. This project builds upon foundational research by Spencer Gietzen at Rhino Security Labs and subsequent contributions from many other security researchers. |
| [Security Reference Architecture Examples](https://github.com/aws-samples/aws-security-reference-architecture-examples) | GitHub - aws-samples/aws-security-reference-architecture-examples: Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform. |
| [Sensitive IAM Actions List](https://github.com/primeharbor/sensitive_iam_actions) | GitHub - primeharbor/sensitive_iam_actions: Crowdsourced list of sensitive IAM Actions |

### <a id="cloud-aws-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [AWS Goat](https://github.com/ine-labs/AWSGoat) | GitHub - ine-labs/AWSGoat: AWSGoat : A Damn Vulnerable AWS Infrastructure |
| [Cloud Goat](https://github.com/RhinoSecurityLabs/cloudgoat) | GitHub - RhinoSecurityLabs/cloudgoat: CloudGoat is Rhino Security Labs&#39; &quot;Vulnerable by Design&quot; AWS deployment tool |
| [CloudCommotion](https://github.com/SecurityRunners/cloudcommotion) | Causes commotion in the cloud using Terraform and AWS to simulate attacks and misconfigurations. |
| [flAWS 2 Cloud](http://flaws2.cloud/) | AWS lab exercise for attacker and defender paths to exploit misconfigurations |
| [flAWS Cloud](http://flaws.cloud) | AWS basic security misconfigurations lab exercises |
| [IAM Vulnerable](https://github.com/BishopFox/iam-vulnerable) | GitHub - BishopFox/iam-vulnerable: Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. |
| [Sad Cloud](https://github.com/nccgroup/sadcloud) | GitHub - nccgroup/sadcloud: A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure |

### <a id="cloud-aws-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [AirIAM](https://github.com/bridgecrewio/AirIAM) | GitHub - bridgecrewio/AirIAM: Least privilege AWS IAM Terraformer |
| [Antiope](https://github.com/turnerlabs/antiope) | GitHub - turnerlabs/antiope: AWS Inventory and Compliance Framework |
| [AWS CLI Multi Sessions](https://github.com/alestic/aws-cli-multi-account-sessions) | GitHub - alestic/aws-cli-multi-account-sessions: bash functions to help run aws-cli commands across roles in multiple accounts with MFA |
| [AWS Consoler](https://github.com/NetSPI/aws_consoler) | GitHub - NetSPI/aws_consoler: A utility to convert your AWS CLI credentials into AWS console access. |
| [AWS IAM CTL](https://github.com/aws-samples/aws-iamctl) | GitHub - aws-samples/aws-iamctl |
| [AWS List Resources](https://github.com/welldone-cloud/aws-list-resources) | GitHub - welldone-cloud/aws-list-resources |
| [AWS Policy Evaluator (APE)](https://github.com/orcasecurity/orca-toolbox/tree/main/iam-ape) | APE takes all of your AWS IAM policies attached to a User, Group, or Role object, and presents you with a single policy, summarizing all of their actual permissions. Taking into account permissions, denials, inherited permissions and permission boundaries! |
| [AWS SSO Reported](https://github.com/onemorepereira/aws-sso-reporter) | GitHub - onemorepereira/aws-sso-reporter: AWS SSO Reporter. It reports what users have access to what accounts as long as they are setup in AWS SSO. |
| [AWSCurl](https://github.com/okigan/awscurl) | curl-like access to AWS resources with AWS Signature Version 4 request signing. |
| [Bucket Loot](https://github.com/redhuntlabs/BucketLoot) | GitHub - redhuntlabs/BucketLoot: BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text. |
| [Cloudformation Guard](https://github.com/aws-cloudformation/cloudformation-guard) | GitHub - aws-cloudformation/cloudformation-guard: Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0 |
| [CloudFox](https://github.com/BishopFox/cloudfox) | GitHub - BishopFox/cloudfox: Automating situational awareness for cloud penetration tests. |
| [CloudSplaining](https://github.com/salesforce/cloudsplaining) | GitHub - salesforce/cloudsplaining: Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report. |
| [CloudSploit](https://github.com/aquasecurity/cloudsploit) | GitHub - aquasecurity/cloudsploit: Cloud Security Posture Management (CSPM) |
| [EC2 Metadata Mock](https://github.com/aws/amazon-ec2-metadata-mock) | GitHub - aws/amazon-ec2-metadata-mock: A tool to simulate Amazon EC2 instance metadata |
| [GuardDuty Tester](https://github.com/awslabs/amazon-guardduty-tester) | GitHub - awslabs/amazon-guardduty-tester: This script is used to generate some basic detections of the GuardDuty service |
| [IAM Access Key Report](https://github.com/aws-samples/iam-access-key-report) | GitHub - aws-samples/iam-access-key-report |
| [IAM Live](https://github.com/iann0036/iamlive) | GitHub - iann0036/iamlive: Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy |
| [IAMbic](https://github.com/noqdev/iambic) | GitHub - noqdev/iambic: IAMbic is Version-Control for IAM. It centralizes and simplifies cloud access and permissions. It maintains an eventually consistent, human-readable, bi-directional representation of IAM in Git. |
| [IAMSpy](https://github.com/WithSecureLabs/IAMSpy) | This is the repository containing IAMSpy, a library that utilises the Z3 prover to attempt to answer questions about AWS IAM. It can load a variety of IAM policies and convert them to generate Z3 constraints and a model, from which queries can be made on identifying whether actions are allowed or not. |
| [Invictus AWS](https://github.com/invictus-ir/Invictus-AWS) | GitHub - invictus-ir/Invictus-AWS |
| [PACU](https://github.com/RhinoSecurityLabs/pacu) | GitHub - RhinoSecurityLabs/pacu: The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. |
| [Policy Universe](https://github.com/Netflix-Skunkworks/policyuniverse) | GitHub - Netflix-Skunkworks/policyuniverse: Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards. |
| [RansomWhen](https://github.com/Permiso-io-tools/RansomWhen) | RansomWhen is a tool to enumerate identities that can lock S3 Buckets using KMS, resulting in ransomwares, as well as detect occurances of S3 Ransomwares using KMS |
| [RepoKid](https://github.com/Netflix/repokid) | GitHub - Netflix/repokid: AWS Least Privilege for Distributed, High-Velocity Deployment |
| [SCP Kit](https://github.com/aquia-inc/scpkit) | GitHub - aquia-inc/scpkit: SCP management tool |
| [TrackIAM](https://github.com/glassechidna/trackiam) | GitHub - glassechidna/trackiam: A project to collate IAM actions, AWS APIs and managed policies from various public sources. |
| [Undocumented API Hunter](https://github.com/DataDog/undocumented-aws-api-hunter) | A tool to uncover undocumented APIs from the AWS Console. |

## <a id="cloud-azure-security"></a> Azure Security

| Name | Description |
|------|-------------|
| [Awesome Azure Pentest](https://github.com/Kyuu-Ji/Awesome-Azure-Pentest) | GitHub - Kyuu-Ji/Awesome-Azure-Pentest: A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure. |
| [Azure Security Survival Kit](https://github.com/03-Cyber/azure-security-survival-kit) | GitHub - O3-Cyber/azure-security-survival-kit |
| [Entra ID RBAC Permission Reference](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference) | Entra ID RBAC Permission Reference - Entra ID Built in |
| [Microsoft Portals Reference](https://cmd.ms) | 🖥 Home \| [cmd.ms] \| List of Microsoft Portals, their links, and use cases. |

### <a id="cloud-azure-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [Azure Goat](https://github.com/XMCyber/XMGoat) | a vulnerable environment, with some significant misconfigurations |
| [PurpleCloud Azure](https://github.com/iknowjason/PurpleCloud) | GitHub - iknowjason/PurpleCloud: A little tool to play with Azure Identity - Azure Active Directory lab creation tool |

### <a id="cloud-azure-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Az Recon](https://github.com/iknowjason/azrecon) | GitHub - iknowjason/azrecon: Az Enum &amp; Recon Cheat Sheet |
| [Azure Storage Reverse Shell](https://github.com/offensive-actions/azure-storage-reverse-shell) | GitHub - offensive-actions/azure-storage-reverse-shell: This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs |
| [AzureHound](https://github.com/BloodHoundAD/AzureHound) | GitHub - BloodHoundAD/AzureHound: Azure Data Exporter for BloodHound |
| [Blackcat](https://github.com/azurekid/blackcat) | BlackCat is a PowerShell module designed to validate the security of Microsoft Azure. It provides a set of functions to identify potential security holes. |
| [GraphRunner](https://github.com/dafthack/GraphRunner) | GitHub - dafthack/GraphRunner: A Post-exploitation Toolset for Interacting with the Microsoft Graph API |
| [Monkey 365](https://github.com/silverhack/monkey365) | GitHub - silverhack/monkey365: Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews. |
| [NoCAP](https://github.com/securesloth/noCAP) | Lightweight security tool for auditing your organization's Conditional Access Policies (CAPs) in Microsoft Entra ID for potential misconfigurations. |
| [PowerZure](https://github.com/hausec/PowerZure) | GitHub - hausec/PowerZure: PowerShell framework to assess Azure security |
| [RoleCrawl](https://github.com/sleeptok3n/RoleCrawl) | GitHub - sleeptok3n/RoleCrawl |
| [ScubaGear](https://github.com/cisagov/ScubaGear) | GitHub - cisagov/ScubaGear: Automation to assess the state of your M365 tenant against CISA&#39;s baselines |
| [TokenSmith](https://github.com/JumpsecLabs/TokenSmith) | TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools. |

## <a id="cloud-cicd-security"></a> CICD Security

### <a id="cloud-cicd-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [CICD Goat](https://github.com/cider-security-research/cicd-goat) | GitHub - cider-security-research/cicd-goat: A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges. |
| [GHA Goat](https://github.com/step-security/github-actions-goat) | GitHub - step-security/github-actions-goat: GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment |
| [GHA-Hazmat](https://github.com/woodruffw/gha-hazmat) | A menagerie of insecure and exploitable GitHub Actions workflows and action definitions |

### <a id="cloud-cicd-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [ADOKit](https://github.com/xforcered/ADOKit) | ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API to perform attacks and enumeration. |
| [Driftwood](https://github.com/trufflesecurity/driftwood) | GitHub - trufflesecurity/driftwood: Private key usage verification. Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. |
| [GATO](https://github.com/praetorian-inc/gato) | GitHub - praetorian-inc/gato: GitHub Actions Pipeline Enumeration and Attack Tool |
| [GitGat](https://github.com/scribe-public/gitgat) | GitHub - scribe-public/gitgat: Evaluate source control (GitHub) security posture |
| [GitGot](https://github.com/BishopFox/GitGot) | GitHub - BishopFox/GitGot: Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets. |
| [NORD Stream](https://github.com/synacktiv/nord-stream) | GitHub - synacktiv/nord-stream: Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab. |

## <a id="cloud-gcp-security"></a> GCP Security

| Name | Description |
|------|-------------|
| [Awesome GCP Security](https://github.com/Littlehack3r/awesome-gcp-pentesting) | GitHub - Littlehack3r/awesome-gcp-pentesting: Tools and blogs I use to perform GCP red teams |
| [GCP Permissions Reference](https://gcp.permissions.cloud/) | Permissions Reference for Google Cloud IAM \| gcp.permissions.cloud |

### <a id="cloud-gcp-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [GCP CTF Workshop](https://github.com/n0jam/gcp-ctf-workshop) | GCP goat environment for BSides NY 2024 workshop |
| [GCP Goat](https://github.com/JOSHUAJEBARAJ/GCP-GOAT) | GitHub - JOSHUAJEBARAJ/GCP-GOAT: GCP GOAT is the vulnerable application for learn the GCP Security |
| [Thunder CTF Cloud](https://thunder-ctf.cloud/) | Thunder CTF allows players to practice attacking vulnerable cloud projects on Google Cloud Platform (GCP). |

### <a id="cloud-gcp-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [GCP Enum Script](https://gitlab.com/gitlab-com/gl-security/security-operations/redteam/redteam-public/pocs/gcp_enum) | GitLab.com / GitLab Security Department / Security Operations Department / Red Team / Red Team Public / Scripts and PoCs / gcp_enum · GitLab |
| [GCP IAM Privilege Escalation](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation) | GitHub - RhinoSecurityLabs/GCP-IAM-Privilege-Escalation: A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team. |
| [GCP Open Resource Enum](https://gitlab.com/gitlab-com/gl-security/security-operations/redteam/redteam-public/pocs/gcp_misc/-/tree/master?ref_type=heads) | Files · master · GitLab.com / GitLab Security Department / Security Operations Department / Red Team / Red Team Public / Scripts and PoCs / gcp_misc · GitLab |
| [GCP Scanner](https://github.com/google/gcp_scanner) | GitHub - google/gcp_scanner: A comprehensive scanner for Google Cloud |
| [GCPwn](https://github.com/NetSPI/gcpwn) | Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot |

## <a id="cloud-iac"></a> IaC

| Name | Description |
|------|-------------|
| [Entra ID Terraform](https://github.com/siigil/entra-id-terraform) | Examples of various Entra ID scenarios in Terraform |
| [Federator](https://github.com/clutchsecurity/federator) | Terraform templates for CI/CD to Cloud federation and Cloud2Cloud IAM federations |
| [OpenTofu](https://github.com/opentofu/opentofu) | Open source fork of Terraform |
| [Pulumi Examples](https://github.com/pulumi/examples) | GitHub - pulumi/examples: Infrastructure, containers, and serverless apps to AWS, Azure, GCP, and Kubernetes... all deployed with Pulumi |
| [Terraform Examples](https://github.com/futurice/terraform-examples) | GitHub - futurice/terraform-examples: Terraform samples for all the major clouds you can copy and paste. The future, co-created. |

### <a id="cloud-iac-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Checkov](https://github.com/bridgecrewio/checkov) | GitHub - bridgecrewio/checkov: Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew. |

## <a id="cloud-kubernetes-security"></a> Kubernetes Security

| Name | Description |
|------|-------------|
| [Cloud Native Security Talks](https://talks.container-security.site/) | Cloud Native Security Talks |
| [Container Security Checklist](https://github.com/krol3/container-security-checklist) | GitHub - krol3/container-security-checklist: Checklist for container security - devsecops practices |
| [EKS Best Practices](https://aws.github.io/aws-eks-best-practices/) | Introduction - EKS Best Practices Guides |
| [Falco Bypasses](https://github.com/blackberry/Falco-bypasses) | GitHub - blackberry/Falco-bypasses: Research on various techniques to bypass default falco ruleset (based on falco v0.28.1). |
| [KubeCTL Cheat Sheet](https://kubernetes.io/docs/reference/kubectl/cheatsheet/) | kubectl Quick Reference \| Kubernetes |
| [Kubernetes Bad Pods](https://github.com/BishopFox/badPods) | GitHub - BishopFox/badPods: A collection of manifests that will create pods with elevated privileges. |
| [Kubernetes Pentesting](https://cloud.hacktricks.xyz/pentesting-cloud/kubernetes-pentesting) | Kubernetes Pentesting - HackTricks Cloud |
| [Kubernetes the Hard Way](https://github.com/kelseyhightower/kubernetes-the-hard-way) | GitHub - kelseyhightower/kubernetes-the-hard-way: Bootstrap Kubernetes the hard way on Google Cloud Platform. No scripts. |
| [Pentesting Docker](https://book.hacktricks.xyz/network-services-pentesting/2375-pentesting-docker) | 2375, 2376 Pentesting Docker - HackTricks |

### <a id="cloud-kubernetes-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [EKS Cluster Games](https://eksclustergames.com/) | challenges are based on real EKS misconfigurations and security issues |
| [K8s Lan Party](https://k8slanparty.com/) | A CTF designed to challenge your Kubernetes hacking skills through a series of critical network vulnerabilities and misconfigurations. |
| [Kubernetes Goat](https://github.com/madhuakula/kubernetes-goat) | GitHub - madhuakula/kubernetes-goat: Kubernetes Goat is a &quot;Vulnerable by Design&quot; cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀 |
| [Simulator](https://github.com/controlplaneio/simulator) | GitHub - controlplaneio/simulator: Kubernetes Security Training Platform - focusing on security mitigation |

### <a id="cloud-kubernetes-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Cloud Container Attack Tool](https://github.com/RhinoSecurityLabs/ccat) | GitHub - RhinoSecurityLabs/ccat: Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments. |
| [Cyphernetes](https://github.com/AvitalTamir/cyphernetes) | Cyphernetes is a Cypher-inspired query language for Kubernetes. A mixture of ASCII-art, SQL and JSONPath, it lets the user express Kubernetes graph operations in a fun and creative way. Cyphernetes works out-of-the-box with your CRDs, supports multi-cluster queries, and more. |
| [DEEPCE](https://github.com/stealthcopter/deepce) | GitHub - stealthcopter/deepce: Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE) |
| [Dive](https://github.com/wagoodman/dive) | A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. |
| [DockerScan](https://github.com/cr0hn/dockerscan) | GitHub - cr0hn/dockerscan: Docker security analysis &amp; hacking tools |
| [Dockle](https://github.com/goodwithtech/dockle) | GitHub - goodwithtech/dockle: Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start |
| [Grype](https://github.com/anchore/grype) | A vulnerability scanner for container images and filesystems. |
| [Karpor](https://github.com/KusionStack/karpor) | Intelligence for Kubernetes. World's most promising Kubernetes Visualization Tool for Developer and Platform Engineering teams. |
| [KubeAudit](https://github.com/Shopify/kubeaudit) | GitHub - Shopify/kubeaudit: kubeaudit helps you audit your Kubernetes clusters against common security controls |
| [Kubefuzz](https://github.com/avolens/kubefuzz) | GitHub - avolens/kubefuzz: Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification. |
| [KubeHound](https://github.com/DataDog/KubeHound) | GitHub - DataDog/KubeHound: Kubernetes Attack Graph |
| [Kubernetes Explorer](https://github.com/iximiuz/kexp) | GitHub - iximiuz/kexp: k&#39;exp - Kubernetes Explorer |
| [KubeStriker](https://github.com/vchinnipilli/kubestriker) | GitHub - vchinnipilli/kubestriker: A Blazing fast Security Auditing tool for Kubernetes |
| [KubiScan](https://github.com/cyberark/KubiScan) | GitHub - cyberark/KubiScan: A tool to scan Kubernetes cluster for risky permissions |
| [Managed Kubernetes Audit Toolkit](https://github.com/DataDog/managed-kubernetes-auditing-toolkit/) | GitHub - DataDog/managed-kubernetes-auditing-toolkit: All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS. |
| [Peirates](https://github.com/inguardians/peirates) | GitHub - inguardians/peirates: Peirates - Kubernetes Penetration Testing tool |
| [Skopeo](https://github.com/containers/skopeo) | GitHub - containers/skopeo: Work with remote images registries - retrieving information, images, signing content |

## <a id="cloud-labs"></a> Labs

| Name | Description |
|------|-------------|
| [CNAPP-Goat](https://github.com/ermetic-research/cnappgoat) | GitHub - ermetic-research/cnappgoat: CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments. |
| [Terragoat](https://github.com/bridgecrewio/terragoat) | GitHub - bridgecrewio/terragoat: TerraGoat is Bridgecrew&#39;s &quot;Vulnerable by Design&quot; Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. |

## <a id="cloud-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Cloud Enum](https://github.com/initstring/cloud_enum) | GitHub - initstring/cloud_enum: Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. |
| [Cloudlist](https://github.com/projectdiscovery/cloudlist) | GitHub - projectdiscovery/cloudlist: Cloudlist is a tool for listing Assets from multiple Cloud Providers. |
| [CloudQuery](https://github.com/cloudquery/cloudquery) | GitHub - cloudquery/cloudquery: The open source high performance data integration platform built for developers. |
| [CNQuery](https://github.com/mondoohq/cnquery) | GitHub - mondoohq/cnquery: open source, cloud-native, graph-based asset inventory |
| [Edge](https://github.com/iknowjason/edge) | GitHub - iknowjason/edge: Recon tool for cloud provider attribution.  Supports AWS, Azure, Google, Cloudflare, and Digital Ocean. |
| [Halbred](https://github.com/vectra-ai-research/Halberd) | GitHub - vectra-ai-research/Halberd: Security testing tool to proactively assess cloud security by executing a comprehensive array of attack techniques across multiple surfaces via a simple web interface. |
| [Prowler](https://github.com/prowler-cloud/prowler) | GitHub - prowler-cloud/prowler: Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more. |
| [ScoutSuite](https://github.com/nccgroup/ScoutSuite) | GitHub - nccgroup/ScoutSuite: Multi-Cloud Security Auditing Tool |
| [Trivy](https://github.com/aquasecurity/trivy) | GitHub - aquasecurity/trivy: Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more |

# <a id="courses"></a> Courses

| Name | Description |
|------|-------------|
| [BurpSuite Certified Practitioner](https://github.com/botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study) | GitHub - botesjuan/Burp-Suite-Certified-Practitioner-Exam-Study: Burp Suite Certified Practitioner Exam Study |
| [CKSS Resources](https://github.com/walidshaari/Certified-Kubernetes-Security-Specialist) | GitHub - walidshaari/Certified-Kubernetes-Security-Specialist: Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 &quot;Kubernetes Certified Security Specialist&quot; Certification exam.  Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you. |
| [Generative AI for Beginners](https://github.com/microsoft/generative-ai-for-beginners) | Learn the fundamentals of building Generative AI applications with our 21-lesson comprehensive course by Microsoft Cloud Advocates. |
| [Hands-on ML](https://github.com/ageron/handson-ml3) | GitHub - ageron/handson-ml3: A series of Jupyter notebooks that walk you through the fundamentals of Machine Learning and Deep Learning in Python using Scikit-Learn, Keras and TensorFlow 2. |
| [Kubernetes Learning Path](https://github.com/techiescamp/kubernetes-learning-path) | GitHub - techiescamp/kubernetes-learning-path: A roadmap to learn Kubernetes from scratch (Beginner to Advanced level) |
| [Modern BinExp](https://github.com/rpisec/mbe) | GitHub - RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC |
| [Nightmare BinExp](https://guyinatuxedo.github.io/index.html) | Nightmare - Nightmare - binary exploitation course |
| [System Design Primer](https://github.com/donnemartin/system-design-primer) | GitHub - donnemartin/system-design-primer: Learn how to design large-scale systems. Prep for the system design interview.  Includes Anki flashcards. |

# <a id="cybersecurity"></a> Cybersecurity

| Name | Description |
|------|-------------|
| [Awesome Go](https://github.com/avelino/awesome-go) | A curated list of awesome Go frameworks, libraries and software |
| [Awesome Vulnerable Labs](https://github.com/kaiiyer/awesome-vulnerable) | A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB. |
| [cuddlephish](https://github.com/fkasler/cuddlephish) | Weaponized Browser-in-the-Middle (BitM) for Penetration Testers |

## <a id="cybersecurity-labs"></a> Labs

| Name | Description |
|------|-------------|
| [Digital Forensics Lab](https://github.com/frankwxu/digital-forensics-lab) | GitHub - frankwxu/digital-forensics-lab: Free hands-on digital forensics labs for students and faculty |
| [Vulnerable Codes](https://vulnerable.codes/) | Learn to research vulnerabilities by reviewing the source code of real-world cases. Join our community of security researchers and level up your research skills. |

## <a id="cybersecurity-resources"></a> Resources

| Name | Description |
|------|-------------|
| [AppSec Interview Questions](https://ishaqmohammed.me/posts/application-security-engineer-interview-questions/) | Application Security Engineer Interview Questions - AppSec Enthusiast. |
| [Hacker Roadmap](https://github.com/msrkp/hacker-roadmap) | GitHub - msrkp/hacker-roadmap: Roadmap to get started in Infosec for absolute begineer |
| [Hacking EBooks](https://github.com/yeahhub/Hacking-Security-Ebooks) | GitHub - yeahhub/Hacking-Security-Ebooks: Top 100 Hacking &amp; Security E-Books (Free Download) |
| [Roadmaps for Study](https://roadmap.sh/roadmaps) | Roadmaps for a variety of different studies and fields |
| [Tech Interview Handbook](https://www.techinterviewhandbook.org/) | Technical Interview Guide for Busy Engineers - Tech Interview Handbook |

# <a id="infrastructure-security"></a> Infrastructure Security

| Name | Description |
|------|-------------|
| [Dorks Collection](https://github.com/cipher387/Dorks-collections-list) | GitHub - cipher387/Dorks-collections-list: List of Github repositories and articles with list of dorks for different search engines |
| [OPKSSH](https://github.com/openpubkey/opkssh) | opkssh is a tool which enables ssh to be used with OpenID Connect allowing SSH access to be managed via identities like alice@example.com instead of long-lived SSH keys. It does not replace SSH, but instead generates SSH public keys containing PK Tokens and configures sshd to verify them. These PK Tokens contain standard OpenID Connect ID Tokens. |
| [Static Analysis Tools](https://github.com/analysis-tools-dev/static-analysis) | GitHub - analysis-tools-dev/static-analysis: ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality. |

## <a id="infrastructure-security-active-directory"></a> Active Directory

| Name | Description |
|------|-------------|
| [AAD Internals](https://aadinternals.com/aadinternals/) | Documentation |
| [AD Pentesting Cheatsheet](https://www.hackthebox.com/blog/active-directory-penetration-testing-cheatsheet-and-guide) | Active directory pentesting: cheatsheet and beginner guide |
| [AD Pentesting Guide](https://github.com/AD-Attacks/Active-Directory-Penetration-Testing) | GitHub - AD-Attacks/Active-Directory-Penetration-Testing |
| [LOLBAS](https://lolbas-project.github.io/) | LOLBAS |
| [WADComs](https://wadcoms.github.io/) | WADComs |

## <a id="infrastructure-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [Under the Wire](https://underthewire.tech/) | UTW &#8211; Under the Wire&#8230; PowerShell Training for the People |

## <a id="infrastructure-security-linux"></a> Linux

| Name | Description |
|------|-------------|
| [GTFOBins](https://gtfobins.github.io/) | GTFOBins |
| [Linux Syscalls 32-bit](https://syscalls32.paolostivanin.com/) | Linux Syscall Reference |
| [Linux Syscalls 64-bit](https://syscalls64.paolostivanin.com/) | Linux Syscall Reference |

## <a id="infrastructure-security-pentesting"></a> Pentesting

| Name | Description |
|------|-------------|
| [Awesome Pentest](https://github.com/enaqx/awesome-pentest) | GitHub - enaqx/awesome-pentest: A collection of awesome penetration testing resources, tools and other shiny things |
| [HackTricks](https://book.hacktricks.xyz/) | HackTricks - HackTricks |
| [Offsec Handbook](https://0xffsec.com/handbook/) | 0xffsec Handbook: The Pentester's Guide \| 0xffsec Handbook |
| [OSCP Resources](https://oscp.infosecsanyam.in/) | OSCP resources |
| [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) | GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF |
| [Pentesting BIBLE](https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/README.md) | Pentesting Bible by blacckhathaceekr |
| [Pentesting Contracts](https://github.com/cure53/Contracts) | GitHub - cure53/Contracts: A small collection of potentially useful contract templates |
| [Pentesting Resources](https://github.com/wtsxDev/Penetration-Testing) | GitHub - wtsxDev/Penetration-Testing: List of awesome penetration testing resources, tools and other shiny things |
| [Practical Ethical Hacking Resources](https://github.com/TCM-Course-Resources/Practical-Ethical-Hacking-Resources) | GitHub - TCM-Course-Resources/Practical-Ethical-Hacking-Resources: Compilation of Resources from TCM&#39;s Practical Ethical Hacking Udemy Course |
| [Privesc Cheatsheet](https://github.com/Ignitetechnologies/Privilege-Escalation) | GitHub - Ignitetechnologies/Privilege-Escalation: This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples. |
| [The Hacker Recipes](https://www.thehacker.recipes) | Resources for pentesting and environment security assessments |
| [VulnHub Writeups](https://github.com/Ignitetechnologies/Vulnhub-CTF-Writeups) | GitHub - Ignitetechnologies/Vulnhub-CTF-Writeups: This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles. |

## <a id="infrastructure-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Age](https://github.com/FiloSottile/age) | A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability. |
| [Amass](https://github.com/owasp-amass/amass) | GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery |
| [ASN](https://github.com/nitefood/asn) | GitHub - nitefood/asn: ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server |
| [AssetFinder](https://github.com/tomnomnom/assetfinder) | GitHub - tomnomnom/assetfinder: Find domains and subdomains related to a given domain |
| [Beelzebub](https://github.com/mariocandela/beelzebub) | GitHub - mariocandela/beelzebub: A secure low code honeypot framework, leveraging AI for System Virtualization. |
| [BlackWidow](https://github.com/1N3/BlackWidow) | GitHub - 1N3/BlackWidow: A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website. |
| [BloodHound Python](https://github.com/dirkjanm/BloodHound.py) | GitHub - dirkjanm/BloodHound.py: A Python based ingestor for BloodHound |
| [BlueHound](https://github.com/zeronetworks/BlueHound) | GitHub - zeronetworks/BlueHound: BlueHound - pinpoint the security issues that actually matter |
| [Bore](https://github.com/ekzhang/bore) | 🕳 bore is a simple CLI tool for making tunnels to localhost |
| [Certipy](https://github.com/ly4k/Certipy) | GitHub - ly4k/Certipy: Tool for Active Directory Certificate Services enumeration and abuse |
| [Chisel](https://github.com/jpillora/chisel) | GitHub - jpillora/chisel: A fast TCP/UDP tunnel over HTTP |
| [Ciphey](https://github.com/Ciphey/Ciphey) | GitHub - Ciphey/Ciphey: ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡ |
| [CrackMapExec](https://github.com/mpgn/CrackMapExec) | Page not found · GitHub · GitHub |
| [CrossLinked](https://github.com/m8sec/CrossLinked) | GitHub - m8sec/CrossLinked: LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping |
| [CVEMap](https://github.com/projectdiscovery/cvemap) | GitHub - projectdiscovery/cvemap: Navigate the CVE jungle with ease. |
| [DASH](https://github.com/DataDog/hash) | GitHub - DataDog/HASH: HASH (HTTP Agnostic Software Honeypot) |
| [Deepfake Offensive Toolkit](https://github.com/sensity-ai/dot) | GitHub - sensity-ai/dot: The Deepfake Offensive Toolkit |
| [DNSX](https://github.com/projectdiscovery/dnsx) | GitHub - projectdiscovery/dnsx: dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers. |
| [Doggo](https://github.com/mr-karan/doggo) | DNS client written in golang with better output formats |
| [Endlessh](https://github.com/skeeto/endlessh) | Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. |
| [EvilGinx2](https://github.com/kgretzky/evilginx2) | GitHub - kgretzky/evilginx2: Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication |
| [EyeWitness](https://github.com/RedSiege/EyeWitness) | GitHub - RedSiege/EyeWitness: EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. |
| [Fennec](https://github.com/AbdulRhmanAlfaifi/Fennec) | GitHub - AbdulRhmanAlfaifi/Fennec: Artifact collection tool for *nix systems |
| [FingerprintX](https://github.com/praetorian-inc/fingerprintx) | GitHub - praetorian-inc/fingerprintx: Standalone utility for service discovery on open ports! |
| [Flan](https://github.com/cloudflare/flan) | GitHub - cloudflare/flan: A pretty sweet vulnerability scanner |
| [FRP](https://github.com/fatedier/frp) | A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet. |
| [GitLeaks](https://github.com/gitleaks/gitleaks) | Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, and whatever else you wanna throw at it via stdin. |
| [GoBuster](https://github.com/OJ/gobuster) | GitHub - OJ/gobuster: Directory/File, DNS and VHost busting tool written in Go |
| [GoHTTPTunnel](https://github.com/mmatczuk/go-http-tunnel) | Fast and secure tunnels over HTTP/2 |
| [GoPhish](https://github.com/gophish/gophish) | GitHub - gophish/gophish: Open-Source Phishing Toolkit |
| [GoST](https://github.com/ginuerzh/gost) | GitHub - ginuerzh/gost: GO Simple Tunnel - a simple tunnel written in golang |
| [GoST](https://github.com/go-gost/gost) | GO Simple Tunnel - a simple tunnel written in golang |
| [GoTunnel](https://github.com/opencoff/go-tunnel) | GitHub - opencoff/go-tunnel: TLS/SSL Tunnel - A modern STunnel replacement written in golang |
| [GoWitness](https://github.com/sensepost/gowitness) | GitHub - sensepost/gowitness: 🔍 gowitness - a golang, web screenshot utility using Chrome Headless |
| [Guardicore - Infection Monkey](https://github.com/guardicore/monkey) | GitHub - guardicore/monkey: Infection Monkey - An open-source adversary emulation platform |
| [Hakrevdns](https://github.com/hakluke/hakrevdns) | GitHub - hakluke/hakrevdns: Small, fast tool for performing reverse DNS lookups en masse. |
| [HakTLDExtract](https://github.com/hakluke/haktldextract) | GitHub - hakluke/haktldextract: Extract domains/subdomains from URLs en masse |
| [HTTP Screenshot](https://github.com/breenmachine/httpscreenshot) | GitHub - breenmachine/httpscreenshot |
| [HTTP Tap](https://github.com/monasticacademy/httptap) | View the HTTP and HTTPS requests made by any linux program by running httptap -- <command> |
| [HTTProbe](https://github.com/tomnomnom/httprobe) | GitHub - tomnomnom/httprobe: Take a list of domains and probe for working HTTP and HTTPS servers |
| [HTTPX](https://github.com/projectdiscovery/httpx) | GitHub - projectdiscovery/httpx: httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. |
| [ICMPtunnel](https://github.com/DhavalKapil/icmptunnel) | Transparently tunnel your IP traffic through ICMP echo and reply packets. |
| [Insider](https://github.com/insidersec/insider) | GitHub - insidersec/insider: Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js). |
| [InteractSH](https://github.com/projectdiscovery/interactsh) | GitHub - projectdiscovery/interactsh: An OOB interaction gathering server and client library |
| [KerBrute](https://github.com/ropnop/kerbrute) | GitHub - ropnop/kerbrute: A tool to perform Kerberos pre-auth bruteforcing |
| [LC - GetAllUrls](https://github.com/lc/gau) | GitHub - lc/gau: Fetch known URLs from AlienVault&#39;s Open Threat Exchange, the Wayback Machine, and Common Crawl. |
| [LDAPRelayScan](https://github.com/zyn3rgy/LdapRelayScan) | GitHub - zyn3rgy/LdapRelayScan: Check for LDAP protections regarding the relay of NTLM authentication |
| [ManSpider](https://github.com/blacklanternsecurity/MANSPIDER) | GitHub - blacklanternsecurity/MANSPIDER: Spider entire networks for juicy files sitting on SMB shares.  Search filenames or file content - regex supported! |
| [MetaBigOr](https://github.com/j3ssie/metabigor) | GitHub - j3ssie/metabigor: OSINT tools and more but without API key |
| [Misconfig Mapper](https://github.com/intigriti/misconfig-mapper) | Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets! |
| [MiTMProxy](https://github.com/mitmproxy/mitmproxy) | GitHub - mitmproxy/mitmproxy: An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers. |
| [Naabu](https://github.com/projectdiscovery/naabu) | GitHub - projectdiscovery/naabu: A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |
| [NoseyParker](https://github.com/praetorian-inc/noseyparker) | GitHub - praetorian-inc/noseyparker: Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history. |
| [Nuclei](https://github.com/projectdiscovery/nuclei) | GitHub - projectdiscovery/nuclei: Fast and customizable vulnerability scanner based on simple YAML based DSL. |
| [OpenGrep](https://github.com/opengrep/opengrep) | 🔎 Static code analysis engine to find security issues in code. |
| [Osmedeus](https://github.com/j3ssie/osmedeus) | GitHub - j3ssie/osmedeus: A Workflow Engine for Offensive Security |
| [PcapPlusPlus](https://github.com/seladb/PcapPlusPlus) | GitHub - seladb/PcapPlusPlus: PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK and PF_RING. |
| [PingTunnel](https://github.com/esrrhs/pingtunnel) | Pingtunnel is a tool that send TCP/UDP traffic over ICMP |
| [PowerShell for AD](https://github.com/g3han/PowerShell-For-Active-Directory) | GitHub - g3han/PowerShell-For-Active-Directory: PowerShell Script for AD Security Assessment |
| [PowerSploit](https://github.com/powershellmafia/powersploit) | GitHub - PowerShellMafia/PowerSploit: PowerSploit - A PowerShell Post-Exploitation Framework |
| [PWN-cat](https://github.com/cytopia/pwncat) | GitHub - cytopia/pwncat: pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) |
| [Red Team Public Group](https://gitlab.com/gitlab-com/gl-security/security-operations/redteam/redteam-public) | Red Team Public · GitLab |
| [SecretBench](https://github.com/setu1421/SecretBench) | GitHub - setu1421/SecretBench: SecretBench is a dataset consisting of different secret types collected from public open-source repositories. |
| [Sherlock](https://github.com/sherlock-project/sherlock) | Hunt down social media accounts by username across social networks |
| [ShiftLeft SAST](https://github.com/ShiftLeftSecurity/sast-scan) | GitHub - ShiftLeftSecurity/sast-scan: Scan is a free &amp; Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly. |
| [Shootback](https://github.com/aploium/shootback) | GitHub - aploium/shootback: a reverse TCP tunnel let you access target behind NAT or firewall |
| [SimpleHTTPServer](https://github.com/projectdiscovery/simplehttpserver) | GitHub - projectdiscovery/simplehttpserver: Go alternative of python SimpleHTTPServer |
| [Sish](https://github.com/antoniomika/sish) | HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH. Ngrok alternative. |
| [SMAP](https://github.com/s0md3v/Smap) | GitHub - s0md3v/Smap: a drop-in replacement for Nmap powered by shodan.io |
| [Sn1per](https://github.com/1N3/Sn1per) | GitHub - 1N3/Sn1per: Attack Surface Management Platform |
| [Snaffler](https://github.com/SnaffCon/Snaffler) | GitHub - SnaffCon/Snaffler: a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax ) |
| [Snitch](https://github.com/karol-broda/snitch) | a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables. |
| [Spoofy](https://github.com/MattKeeley/Spoofy) | GitHub - MattKeeley/Spoofy: Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. |
| [Stowaway](https://github.com/ph4ntonn/Stowaway) | Stowaway -- Multi-hop Proxy Tool for pentesters |
| [SubFinder](https://github.com/projectdiscovery/subfinder) | GitHub - projectdiscovery/subfinder: Fast passive subdomain enumeration tool. |
| [TCPing](https://github.com/pouriyajamshidi/tcping) | Ping TCP ports using tcping. Inspired by Linux's ping utility. Written in Go |
| [TestSSL.sh](https://github.com/drwetter/testssl.sh) | GitHub - drwetter/testssl.sh: Testing TLS/SSL encryption anywhere on any port |
| [Tiny Check](https://github.com/KasperskyLab/TinyCheck) | GitHub - KasperskyLab/TinyCheck: TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere. |
| [TruffleHog](https://github.com/trufflesecurity/trufflehog/) | TruffleHog is the most powerful secrets Discovery, Classification, Validation, and Analysis tool. In this context secret refers to a credential a machine uses to authenticate itself to another machine. This includes API keys, database passwords, private encryption keys, and more... |
| [Tsunami Scanner](https://github.com/google/tsunami-security-scanner) | GitHub - google/tsunami-security-scanner: Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. |
| [Uncover](https://github.com/projectdiscovery/uncover) | GitHub - projectdiscovery/uncover: Quickly discover exposed hosts on the internet using multiple search engines. |
| [Venom](https://github.com/Dliv3/Venom) | Venom - A Multi-hop Proxy for Penetration Testers |
| [VulnHuntr](https://github.com/protectai/vulnhuntr) | A tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis. |
| [Web Check](https://github.com/Lissy93/web-check) | All-in-one OSINT tool for analysing any website. Also available at https://web-check.xyz |
| [WhosThere](https://github.com/ramonvermeulen/whosthere) | Local Area Network discovery tool with a modern Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an intuitive way. Knock Knock.. who's there? |
| [WSTunnel](https://github.com/erebe/wstunnel) | GitHub - erebe/wstunnel: Tunnel all your traffic over websocket protocol - Bypass firewalls/DPI - Static binary available |

# <a id="mobile-security"></a> Mobile Security

| Name | Description |
|------|-------------|
| [Frida Codeshare](https://codeshare.frida.re/) | Frida CodeShare |
| [MASTG](https://mas.owasp.org/MASTG/) | OWASP MASTG - OWASP Mobile Application Security |

## <a id="mobile-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [Damn Vulnerable Web App](https://github.com/digininja/DVWA) | GitHub - digininja/DVWA: Damn Vulnerable Web Application (DVWA) |
| [DIVA Android](https://github.com/payatu/diva-android) | GitHub - payatu/diva-android: DIVA Android - Damn Insecure and vulnerable App for Android |
| [Frida Labs](https://github.com/DERE-ad2001/Frida-Labs) | GitHub - DERE-ad2001/Frida-Labs: The repo contains a series of challenges for learning Frida for Android Exploitation. |
| [OWASP iGoat](https://github.com/OWASP/igoat) | GitHub - OWASP/igoat: OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar |

## <a id="mobile-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [Frida](https://frida.re) | Frida • A world-class dynamic instrumentation toolkit \| Observe and reprogram running programs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD, and QNX |
| [Frida iOS Dump](https://github.com/AloneMonkey/frida-ios-dump) | GitHub - AloneMonkey/frida-ios-dump: pull decrypted ipa from jailbreak device |
| [GrapeFruit](https://github.com/chichou/grapefruit) | GitHub - ChiChou/grapefruit: (WIP) Runtime Application Instruments for iOS. Previously Passionfruit |
| [JADX](https://github.com/skylot/jadx) | GitHub - skylot/jadx: Dex to Java decompiler |
| [Mobile Security Framework](https://github.com/MobSF/Mobile-Security-Framework-MobSF) | GitHub - MobSF/Mobile-Security-Framework-MobSF: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. |
| [Objection](https://github.com/sensepost/objection) | GitHub - sensepost/objection: 📱 objection - runtime mobile exploration |

# <a id="piracy"></a> Piracy

| Name | Description |
|------|-------------|
| [Everything Moe](https://everythingmoe.com/) | Curated toplist of everything Otaku culture |
| [FMHY](https://fmhy.net/) | Free Media Heck Yeah. The largest collection of free stuff on the internet! |
| [Stremio Guide](https://guides.viren070.me/stremio) | This guide contains all the information you need to setup Stremio, your on-demand streaming experience. |

# <a id="productivity-qol"></a> Productivity & QoL

| Name | Description |
|------|-------------|
| [CodeGrepper](https://www.codegrepper.com/) | Grepper \| The Query & Answer System for the Coder Community |
| [DoNotPay](https://donotpay.com) | DoNotPay - Your AI Consumer Champion |
| [Grep App](https://grep.app/) | grep.app \| code search |
| [Oh Shit Git](https://ohshitgit.com/) | Oh Shit, Git!?! |
| [Personal Security and Privacy](https://security-list.js.org/) | Security List 🔐 |
| [Personal Security Checklist](https://github.com/lissy93/personal-security-checklist) | Lissy93/personal-security-checklist: 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024 |
| [Privacy Tools IO](https://www.privacytools.io/) | Best Privacy Tools & Software Guide in in 2024 |
| [Security Tools Reviews](https://www.cloudwards.net/) | Cloudwards.net \| Software &amp; Online Security Tools Reviewed |
| [TinyWow](https://tinywow.com/) | Free AI Writing, PDF, Image, and other Online Tools - TinyWow |
| [ToS;DR](https://tosdr.org) | Frontpage -- Terms of Service; Didn&#039;t Read |
| [Untools](https://untools.co/) | Tools for better thinking \| Untools |

# <a id="web-security"></a> Web Security

| Name | Description |
|------|-------------|
| [Bug Bounty Reference](https://github.com/ngalongc/bug-bounty-reference) | GitHub - ngalongc/bug-bounty-reference: Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature |
| [Bug Bounty Writeups](https://github.com/devanshbatham/Awesome-Bugbounty-Writeups) | GitHub - devanshbatham/Awesome-Bugbounty-Writeups: A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference |
| [OWASP CheatSheets](https://cheatsheetseries.owasp.org/Glossary.html) | Index Alphabetical - OWASP Cheat Sheet Series |
| [Rogue Apps](https://github.com/huntresslabs/rogueapps) | This repository documents observed the TTPs associated with OIDC/OAuth 2.0 application attacks. |

## <a id="web-security-fuzzing"></a> Fuzzing

| Name | Description |
|------|-------------|
| [Fuzzing 101](https://github.com/antonio-morales/Fuzzing101) | GitHub - antonio-morales/Fuzzing101: An step by step fuzzing tutorial. A GitHub Security Lab initiative |
| [Fuzzing Blog](https://bishopfox.com/blog/fuzzing-aka-fuzz-testing) | Fuzz Testing for blackbox security analysis \| Bishop Fox |

## <a id="web-security-graphql"></a> GraphQL

| Name | Description |
|------|-------------|
| [Awesome GraphQL](https://github.com/chentsulin/awesome-graphql) | GitHub - chentsulin/awesome-graphql: Awesome list of GraphQL |
| [GraphQL Threat Matrix](https://github.com/nicholasaleks/graphql-threat-matrix) | built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. |
| [HackTricks - GraphQL](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/graphql) | Pentesting GraphQL - HackTricks |

## <a id="web-security-labs"></a> Labs

| Name | Description |
|------|-------------|
| [Damn Vulnerable GraphQL App](https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application) | GitHub - dolevf/Damn-Vulnerable-GraphQL-Application: Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook&#39;s GraphQL technology, to learn and practice GraphQL Security. |
| [GraphQL Labs](https://github.com/righettod/poc-graphql) | GitHub - righettod/poc-graphql: Research on GraphQL from an AppSec point of view. |
| [JSON Interop Lab](https://github.com/BishopFox/json-interop-vuln-labs) | GitHub - BishopFox/json-interop-vuln-labs: Companion labs to &quot;An Exploration of JSON Interoperability Vulnerabilities&quot; |
| [Web Goat](https://github.com/WebGoat/WebGoat) | GitHub - WebGoat/WebGoat: WebGoat is a deliberately insecure application |

## <a id="web-security-tools"></a> Tools

| Name | Description |
|------|-------------|
| [AWS API Gateway IP Rotator](https://github.com/Ge0rg3/requests-ip-rotator) | GitHub - Ge0rg3/requests-ip-rotator: A Python library to utilize AWS API Gateway&#39;s large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. |
| [Az Token Finder](https://github.com/HackmichNet/AzTokenFinder) | GitHub - HackmichNet/AzTokenFinder. It simply opens the processes you provide and searches through the memory for JWT like looking data and extracts them. |
| [CDN Check](https://github.com/projectdiscovery/cdncheck) | A utility to detect various technology for a given IP address. |
| [DalFox](https://github.com/hahwul/dalfox) | GitHub - hahwul/dalfox: 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation. |
| [Elastic Burp](https://github.com/portswigger/elastic-burp) | GitHub - PortSwigger/elastic-burp: The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch |
| [FFuF](https://github.com/ffuf/ffuf) | GitHub - ffuf/ffuf: Fast web fuzzer written in Go |
| [Graph Specter](https://github.com/CyberRoute/graphspecter) | Check if GraphQL introspection is enabled. Export introspection data to JSON file. Exports queries and mutations ready to test. Executes queries and mutations in bulk or stand-alone. |
| [GraphQL Clairvoyance](https://github.com/nikitastupin/clairvoyance) | GitHub - nikitastupin/clairvoyance: Obtain GraphQL API schema even if the introspection is disabled |
| [GraphQL Cop](https://github.com/dolevf/graphql-cop) | small Python utility to run common security tests against GraphQL APIs |
| [GraphQL Map](https://github.com/swisskyrepo/GraphQLmap) | GitHub - swisskyrepo/GraphQLmap: GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;) |
| [GraphQL Path Enum](https://gitlab.com/dee-see/graphql-path-enum) | This is a tool that lists the different ways of reaching a given type in a GraphQL schema. |
| [GraphQL Voyager](https://github.com/IvanGoncharov/graphql-voyager) | GitHub - graphql-kit/graphql-voyager: 🛰️ Represent any GraphQL API as an interactive graph |
| [H2C Smuggler](https://github.com/BishopFox/h2csmuggler) | GitHub - BishopFox/h2csmuggler: HTTP Request Smuggling over HTTP/2 Cleartext (h2c) |
| [HakOriginFinder](https://github.com/hakluke/hakoriginfinder) | GitHub - hakluke/hakoriginfinder: Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs! |
| [Hakrawler](https://github.com/hakluke/hakrawler) | GitHub - hakluke/hakrawler: Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |
| [HoppScotch](https://hoppscotch.io/) | Hoppscotch • Open source API development ecosystem |
| [InQL](https://github.com/doyensec/inql) | GitHub - doyensec/inql: InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration. |
| [Jaeles](https://github.com/jaeles-project/jaeles) | GitHub - jaeles-project/jaeles: The Swiss Army knife for automated Web Application Testing |
| [JWT Tool](https://github.com/ticarpi/jwt_tool) | jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens). |
| [Katana](https://github.com/projectdiscovery/katana) | GitHub - projectdiscovery/katana: A next-generation crawling and spidering framework. |
| [KeyHacks](https://github.com/streaak/keyhacks) | GitHub - streaak/keyhacks: Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they&#39;re valid. |
| [Posting](https://github.com/darrenburns/posting) | A powerful HTTP client that lives in your terminal. |
| [Proxify](https://github.com/projectdiscovery/Proxify) | GitHub - projectdiscovery/proxify: A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go. |
| [Reaper](https://github.com/ghostsecurity/reaper) | GitHub - ghostsecurity/reaper: 💀 Don&#39;t fear the Reaper 👻 - Web security assessment tool |
| [RetireJS](https://github.com/retirejs/retire.js/) | GitHub - RetireJS/retire.js: scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds. |
| [Route Detect](https://github.com/mschwager/route-detect) | GitHub - mschwager/route-detect: Find authentication (authn) and authorization (authz) security bugs in web application routes. |
| [SnallyGaster](https://github.com/hannob/snallygaster) | GitHub - hannob/snallygaster: Tool to scan for secret files on HTTP servers |
| [SQL Map](https://github.com/sqlmapproject/sqlmap) | GitHub - sqlmapproject/sqlmap: Automatic SQL injection and database takeover tool |
| [SubJack](https://github.com/haccer/subjack) | GitHub - haccer/subjack: Subdomain Takeover tool written in Go |
| [SubJS](https://github.com/lc/subjs) | GitHub - lc/subjs: Fetches javascript file from a list of URLS or subdomains. |
| [SubOver](https://github.com/Ice3man543/SubOver) | GitHub - Ice3man543/SubOver: A Powerful Subdomain Takeover Tool |
| [URO](https://github.com/s0md3v/uro) | GitHub - s0md3v/uro: declutters url lists for crawling/pentesting |
| [Yaak](https://github.com/mountain-loop/yaak) | The most intuitive desktop API client. Organize and execute REST, GraphQL, WebSockets, Server Sent Events, and gRPC 🦬 |
| [YSoSerial](https://github.com/frohoff/ysoserial) | GitHub - frohoff/ysoserial: A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |

link-hub

link-hub 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

link-hub

link-hub 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README