f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.

A curated list of awesome warez and piracy links

A list of public penetration test reports published by several consulting firms and academic security groups.

A collection of several hundred online tools for OSINT

Automate the creation of a lab environment complete with security tooling and logging best practices

Active Directory and Internal Pentest Cheatsheets

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in gener…

The official Red Hat project page.

Maester is a test automation framework to help you stay in control of your Microsoft security configuration.

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

BLACKEYE v2.0 | New Phishing tool with localtunnel (Discount)

Thio's Browser-Based Tools: Various utilities and tools that run locally right in your browser

Passive Optical Network WIKI

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

Repository for idPowerToys an app for Entra admins.

Collection of tools to use with Azure Applications

List of GitHub accounts that were manually verified as being associated with big tech companies. (A continuous work in progress)

capNcook - a dark web exploration tool

The databases, API's and managers behind https://websecweekly.org

Home of IoPT

ShoDam is a simple and effective bookmarklet designed to extract IP addresses from Shodan search results with a single click.

The darknet operational guide. Covers anonymity tools, OPSEC, and navigation. No filler.

Automated Phishing Tool

Class