Search awesome repositories

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

New ways of breaking app-integrated LLMs

Windows / Linux Local Privilege Escalation Workshop

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Metadata harvester

a security scanner for custom LLM applications

A Course on Intermediate Level Linux Exploitation

Damn Small Vulnerable Web

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

A list of curated resources for people interested in AI Red Teaming, Jailbreaking, and Prompt Injection

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

🧠 LLMFuzzer - Fuzzing Framework for Large Language Models 🧠 LLMFuzzer is the first open-source fuzzing framework specifically designed for Large Language Models (LLMs), especially for their integrations in applications via LLM APIs. 🚀💥

the main hackademic code repository

OWASP Broken Web Applications Project

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

OSINT dating tool for web pages

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.