A simple example for illustrating security best practices with Docker

Face Mask Detection system based on computer vision and deep learning using OpenCV and Tensorflow/Keras

HackSys Extreme Vulnerable Windows Driver

Smart Contract Weakness Classification and Test Cases

Golang for Security Professionals

Python automation of Docker.sock abuse

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

This repo has been migrated to https://github.com/github/security-lab/tree/master/SecurityExploits

Top 100 Hacking & Security E-Books (Free Download)

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security…

'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.

Google CTF

Automatically exported from code.google.com/p/owasp-top-10

Writeup for picoCTF 2018

A open contribute bootcamp to develop DevSecOps skills...

Vendor Security Model Contract

x86 IA-32 and x86-64 userland minimal examples tutorial. Hundreds of runnable asserts. Nice GDB setup. IO done with libc, so OS portable in theory. NASM and GAS covered. Tested in Ubuntu 18.04. Con…

Orc is a post-exploitation framework for Linux written in Bash

A working docker-compose of a CI system with GitLab, Jenkins, and SonarQube

Ansible playbooks I use for talks and demos

🔥 A curated list of awesome web-app firewall (WAF) stuff.

A tool to generate media files with malicious metadata

Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.