A free, intentionally-vulnerable OWASP Top 10 (2021) CTF web app. Hack a fake 80s arcade through 18 challenges — SQLi, XSS, SSRF, IDOR, RCE and more — with hints, a scoreboard and lessons. Runs locally in Docker. Three difficulty levels.
Cybersecurity Protector - Founder of 2MNY Security. Building cybersecurity protection tools that keep the web safe: 200 open-source modules + 282 online checkers at 2mny.com
☁️🔐 Awesome Cyber Security Heaven — 438 curated FREE cybersecurity tools across 14 realms: pentesting, bug bounty, OSINT, threat intel, DFIR, DevSecOps & AI/LLM security. License-verified, URLs live-checked, no paywalls.
Personal CTF & VulnHub writeup repository by André Henrike (@mrhenrike). Step-by-step walkthroughs, exploit scripts (Bash, Python, C, Ruby), MITRE ATT&CK mappings, CVE references, APT group correlations and security framework alignment (NIST CSF 2.0, NIST SP 800-53, CISA KEV, C2M2, D3FEND). 700+ VMs planned. EN-US and PT-BR versions.
Open-source AI penetration testing tool to find and fix app vulnerabilities (mirror of usestrix/strix, Apache-2.0)
Fast, zero-dependency subdomain takeover scanner. One file, pure Python stdlib — passive enum, DNS triage, CNAME extraction, 40+ takeover fingerprints, markdown/JSON reports.
Self-hosted homelab cockpit: voice assistant (Jarvis) + live security dashboard — Wazuh SIEM/vuln/agents, HackTheBox, CVEs, PC-health — plus a Flutter companion app.
The complete hacking & penetration testing roadmap. From beginner to elite. 43,500+ lines across 8 phases: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources.
Project by AUTHENTEC, for Hacker House Hackathon at Goa
Secure Windows File System Over Local Access Network! Unpatched SMB services (ports 139 and 445), Samba File Sharing and default remote administration settings allow attackers on the same network to scan, discover, and potentially execute remote code on vulnerable Windows machines. The given script automates essential security controls by restricts
🎯 Hack the Lab — zlam nasze produkty zanim zrobi to ktos inny. Challenges, CVE, Hall of Fame.
Click2Shell — WordPress Pre-Auth RCE Chain (PoC)
FTW — a CTF file-transfer wargame (OverTheWire style): 34 levels from scp to /dev/tcp, encoding, compression and a hint-free GHOST mode. Docker, EN/RU.
Get alerts when new Bluetooth devices appear in your local neighbourhood.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
The most complete community index of bug bounty, VDP, Web3, AI/LLM & vuln-acquisition platforms — plus a getting-started playbook.
Search a CVE ID or a product name against the local ExploitDB mirror, see whether a public exploit exists, and read the vulnerability description without leaving the bar.