Open source. Open possibilities.

A curated collection of Web Application Security payloads and bypasses for pentesting and CTFs, covering vulnerability descriptions, exploitation techniques, and Burp Intruder file sets.

Strix is an open-source AI-powered penetration testing tool that uses autonomous agents to identify, validate, and fix application vulnerabilities through real proof-of-concept exploits.

A curated collection of awesome GitHub lists covering cybersecurity topics for hackers, pentesters, and security researchers — including bug bounty, OSINT, reverse engineering, CTF, malware analysis, web security, IoT, AI security, and more.

Shannon is an open-source, autonomous AI pentester for web applications and APIs. It analyzes your source code to find attack paths, then executes real exploits against a running app, reporting only vulnerabilities proven with a working proof of concept.

A curated collection of 150+ tools and techniques for red teaming and penetration testing, organized by MITRE ATT&CK framework categories covering reconnaissance, initial access, execution, privilege escalation, defense evasion, credential access, lateral movement, command and control, exfiltration, and impact.

OWASP Web Security Testing Guide is an open-source reference for testing web applications and services, with structured scenarios, versioned identifiers, stable documentation, and community contributions.