🌐 Jekyll is a blog-aware static site generator in Ruby

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

Shamelessly convert any Python 2 script into a terrible single line of code

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

HTTP weak pass scanner

Gryffin is a large scale web security scanning platform.

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

to discover subdomains of your target domain

Exploit-Exercises Nebula全攻略——Linux平台下的漏洞分析入门

各种安全相关思维导图整理收集

KCon is a famous Hacker Con powered by Knownsec Team.

A little tool to play with Windows security

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.