sapienshack Goto Github PK

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-cloud-security

Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

brains

⚡️λ Ghosts in the Shell : Function Composition in a Network of Brains

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

dehashed-api-tool

A command-line tool to query the DeHashed API. Easily search for various parameters like usernames, emails, hashed passwords, IP addresses, and more.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

howtohunt

Collection of methodology and test case for various web vulnerabilities.

linux-private-i

Linux bash tool for Enumeration & Privilege Escalation

linux-privilege-escalation

Tips and Tricks for Linux Priv Escalation

mega-hacking-e-books-collection

oscp

oscp-1

OSCP

oscp-notes-template

A template Obsidian Vault for storing your OSCP revision notes

oscp-pre-preparation-plan-and-notes

My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]

pentest-notes

pentestmindmap

a mindmap on pentest #pentestmindmap #oscp #lpt #ecsa #ceh #bugbounty

practical-ethical-hacking-resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

pwst-resources

Resources for Students in the Practical Webapp Security and Testing course

sapiens_scripts

sapienshack.github.io

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

subdomain

vulnapps

Vulnerable java and .net Applications

vulnerable-node

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

web-security-academy-series

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.