Sanoop Thomas

xvwa. XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

Halcyon-IDE. First IDE for Nmap Script (NSE) Development.

Practical-Reverse-Engineering-using-Radare2. Training Materials of Practical Reverse Engineering using Radare2

NSE. Some works on Nmap Scripts (NSE)

hugo-theme-timeline. Simple timeline theme for hugo

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

awesome-incident-response. A curated list of tools for incident response

Script-Bucket. Scripts developed for my researches in various languages - bash, python and lot more.

public-pentesting-reports. Curated list of public penetration test reports released by several consulting firms and academic security groups

s4n7h0.

ava. AVA - Human Vulnerability Scanner (Core)

scripts. Scripts I use during pentest engagements.

linux-re-101. A collection of resources for linux reverse engineering

pythonpentest. A repository for large scripts from my book.

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

pentest-wiki. PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

hacker-scripts. Based on a true story

REsources. Reverse Engineering Resources

blackhat-arsenal-tools. Official Black Hat Arsenal Security Tools Repository

Security-Research. Misc resources and documents on my security research

awesome-ml-for-cybersecurity. :octocat: Machine Learning for Cyber Security

malwaRE. malware repository framework - for personal use only

exrs. Exercises for learning Reverse Engineering and Exploitation.

r2-scripts. Multiple radare2 rpipe scripts

pdfcracker. A fast, customizable PDF password brute-forcer written in Go.

pafish. Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

payloads. Git All the Payloads! A collection of web attack payloads.