Welcome SecToolkit repository! This is a comprehensive collection of cybersecurity and bug bounty hunting topics. Here, you'll find a variety of resources, notes, and practical projects aimed at enhancing knowledge and skills in identifying and mitigating security vulnerabilities.
☆51Jun 3, 2025Updated last year
Alternatives and similar repositories for SecToolkit
Users that are interested in SecToolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a complete set of HTB academy CBBH path cheatsheets and skills assesment solutions☆11May 10, 2024Updated 2 years ago
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated 11 months ago
- ☆18Jan 18, 2026Updated 9 months ago
- All cheetsheets with main information from HTB CBBH role path in one place.☆127Mar 20, 2024Updated 2 years ago
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A collection of awesome tools, software, libraries, learning tutorials & videos, frameworks, best practices and technical resources abou…☆66Jan 6, 2023Updated 3 years ago
- Cyber Security☆23Mar 4, 2023Updated 3 years ago
- A list of vulnerabilities and exploits that Vz0n found across various Discord apps and bots.☆22Oct 22, 2026Updated last week
- ☆31Apr 16, 2025Updated last year
- Advanced Android RAT Framework for Authorized Security Testing | Supports Android 5.0-16 | Telegram Integration | Multi-Device Management☆24Mar 6, 2026Updated 7 months ago
- ☆26Jan 20, 2026Updated 9 months ago
- ☆90Mar 17, 2025Updated last year
- A simple trap for web crawlers☆13Aug 2, 2023Updated 3 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆11Feb 1, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Security Operation Center Lab☆23Oct 8, 2024Updated 2 years ago
- Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.☆494May 21, 2025Updated last year
- An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best gui…☆44Sep 23, 2023Updated 3 years ago
- ☆32Nov 3, 2024Updated last year
- CEHv12 Notes☆18Jun 11, 2023Updated 3 years ago
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- ☆11Apr 23, 2026Updated 6 months ago
- resux' reference sheets☆32Updated this week
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A simple index for HackTheBox machine along with tags☆16Mar 26, 2026Updated 7 months ago
- CTF and Bug Bounty Hunting WriteUps.☆21Oct 23, 2026Updated last week
- Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.☆11Nov 13, 2024Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- ☆10Oct 19, 2026Updated last week
- ☆10Jul 8, 2024Updated 2 years ago
- Organize, track, and share vulnerability findings effortlessly. This Burp Suite extension integrates with Obsidian, offering a proven not…☆47Oct 7, 2026Updated 3 weeks ago
- This repository contains a list of vulnerable virtual machines from VulnHub which I have attempted, in preparation of taking the OSCP exa…☆13Dec 10, 2019Updated 6 years ago
- Argus is used to test for Blind XSS and SSRF vulnerbilities or any sort of OOB detection☆15Nov 1, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆13Jun 27, 2023Updated 3 years ago
- A basic Android background service that connects to a remote server, executes commands, and returns encrypted output. Disguised as a syst…☆29Aug 2, 2025Updated last year
- Most powerfull Wifi Jammier.with fixes.☆12Oct 14, 2022Updated 4 years ago
- ☆12Jul 16, 2026Updated 3 months ago
- A local wordlist intelligence and workflow management tool for offensive security & Bug Bounty workflows.☆15May 30, 2026Updated 5 months ago
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- PWNable pyjail☆13Jan 13, 2025Updated last year