🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻 - jakejarvis/awesome-shodan-queries

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering. ...

Earlier this year, an Oracle WebLogic deserialization vulnerability was discovered and released as an 0day vulnerability. The bug was severe enough for Oracle to break their normal quarterly patch cadence and release an emergency update . Unfortunately…

Disclaimer

Top 100 Hacking & Security E-Books (Free Download) - Powered by Yeahhub.com - yeahhub/Hacking-Security-Ebooks

Observe and reprogram running programs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD, and QNX

The ‘Night City’ blackmarket is powered by ‘Droidcoin’. An anonymous crypto-currency. The rogue androids seem to have hacked the ‘Nighty…

Reverse Engineer CrackMe0x00.exe with me using Ghidra! Fix .text functions names in Ghidra: https://youtu.be/WENXr6iDu8A Download CrackMe0x00 at: https://git...

Andromeda - Interactive Reverse Engineering Tool for Android Applications - secrary/Andromeda

Compilation of basic Burp Suite tips to utilize when assessing the security posture of web applications.

C# Script used for Red Team. Contribute to Mr-Un1k0d3r/RedTeamCSharpScripts development by creating an account on GitHub.

A zero-day exploit for the vBulletin forum platform was publicly disclosed and quickly used to attack affected versions of the forum software. It turns out, though, that this exploit has been known, utilized, and sold by researchers and attackers for years.

Fuzzing for LFI using Burpsuite. Contribute to Team-Firebugs/Burp-LFI-tests development by creating an account on GitHub.

In this methodology I've specified a way to exploit SSTI where traditional methods of exploitation failed.

Server Side Request Forgery (SSRF) is a type of attack that can be carried out to compromise a server. The exploitation of an SSRF…

Offensive website security Bug bounty Ethical hacking

Interactive cross-site scripting (XSS) cheat sheet for 2026, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.