A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for understanding controls, policy as code, and continuous authorization.

🕵️ A curated list of awesome TraceLabs-endorsed OSINT tools

Write your CV in Markdown and generate both a responsive web page and a professional PDF with minimal setup. Features modern tooling (Vite, Puppeteer), beautiful icons, and automated PDF generation…

FREE PROXY LIST (Gets Updated Every 10 Minutes). included HTTP(S) Proxy.

Get PROXY List that gets updated everyday

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections…

My Notes about Penetration Testing

Nafeed-Broken-Link: A Python tool designed to check for broken social media links on a given domain. This script crawls all accessible pages of a specified domain and identifies social media links,…

A powerful asynchronous XSS scanner supporting up to 1,500 concurrent requests.

this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Blackbook of malware domains

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Top disclosed reports from HackerOne

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

🎯 SQL Injection Payload List

A list of free, public, forward proxy servers. UPDATED DAILY!

A fuzzer for detecting open redirect vulnerabilities

Blind WAF identification tool

Ghidra is a software reverse engineering (SRE) framework

Hands-on ethical hacking projects for beginners, covering network scanning, web app testing, password cracking, honeypots, Wi-Fi auditing, phishing, and SQL injection.