I’m going to walk through a simple yet high-impact privilege escalation I landed on while poking around…

Author: @Ambulong Security Team ChaMd5 disclose a Local File Inclusion vulnerability in phpMyAdmin latest version 4.8.1. And the exploiting of this vulnerability may lead to Remote Code Execution. In

Exploitation Framework for Embedded Devices. Contribute to threat9/routersploit development by creating an account on GitHub.

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL

At OpSecX, we understand the importance of security education. We believe that books are great resources that provide detailed and in-depth knowledge on a topic and serves as a great reference material. If you are into books, then we recommend the following…

YARA malware query accelerator (web frontend). Contribute to CERT-Polska/mquery development by creating an account on GitHub.

Chrome extension and Express server that exploits keylogging abilities of CSS. - maxchehab/CSS-Keylogging

DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense. - cryps1s/DARKSURGEON

During the latest years Web Security has become a very important topic in the IT Security field. The advantages the web offers resulted in very critical services being developed as web applications. The business requirements for their web applications security…

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform. - GitHub - xtiankisutsa/awesome-mobile-CTF: This i...

Hi Guys,

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services. - OWASP/wstg

Tool to look for several security related Android application vulnerabilities - linkedin/qark