A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A command-line tool to download photos from iCloud

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

📚 A curated list of awesome CI CD security resources

Epyon is a swiss army knife tool for pentesting DevOps ecosystems.

Various tips & tricks

Dump unix domain socket traffic with bpf

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

Execute ELF files without dropping them on disk

Container image with malware and crypto miner for testing purposes

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

A container analysis and exploitation tool for pentesters and engineers.

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

A curated list of resources about detecting threats and defending Kubernetes systems.

Kubernetes Security Training Platform - focusing on security mitigation

A collection of awesome security hardening guides, tools and other resources

🌀 A log file highlighter

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

📦 Make security testing of K8s, Docker, and Containerd easier.

The file management automation tool.

Digging Deeper....

Threat-hunting tool for Linux

An informational repo about hunting for adversaries in your IT environment.

Pre-Built Vulnerable Environments Based on Docker-Compose

‼️ A complete primer on the whys and hows of todo.txt.

SSH Key Manager for 1Password, Bitwarden and AWS S3.

Terminals is a secure, multi tab terminal services/remote desktop client. It uses Terminal Services ActiveX Client (mstscax.dll). The project started from the need of controlling multiple connectio…

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.