It is a simple password brute force tool designed for ethical hacking and security testing. Automates the process of selecting passwords for a given user on a website by sending POST requests with different passwords and analyzing the response.

🚀 Generate high-volume HTTP requests with Kaneki-DDoS, a user-friendly tool for network load testing featuring multiple modes and real-time logging.

A curated repository of categorized payloads for testing and exploiting common web vulnerabilities in ethical hacking and penetration testing.

A hands-on AI security workshop that hacks and protects AI agents using MCP servers, featuring real vulnerability demos and prompt injection defense.

Lightweight CLI tool for testing web cache deception vulnerabilities. Built to avoid manual testing, bloated recon tools, and GUI-based platforms. Simple, fast, and script-friendly.

Writeups and solutions for all levels of Google's XSS Game - an educational security challenge for learning Cross-Site Scripting vulnerabilities.

TuwiliScan is a vulnerability scanner designed to detect potential SQL Injection vulnerabilities on websites by crawling and testing query parameters in URLs. It automates the scanning process using Python and provides color-coded feedback on identified vulnerabilities.

A comprehensive Security Playbooks providing MITRE ATT&CK-based attack scenarios, detection rules (Sigma, YARA, Suricata), PoC scripts, and hands-on lab walkthroughs.

History Poison Lab: Vulnerable LLM implementation demonstrating Chat History Poisoning attacks. Learn how attackers manipulate chat context and explore mitigation strategies for secure LLM applications.

Compliance-focused vulnerability probes for NVIDIA garak, targeting LLMs in regulated industries (CMMC, NIST, HIPAA, DFARS)

Black-box network penetration testing project using tools like Nmap, Nessus, Metasploit & Burp Suite. Includes CVSS-based risk assessment & remediation roadmap.

Hands-on API security vulnerability lab focused on OWASP API Top 10 testing and exploration.

A code challenge for API testing to hunt down race conditions.

This project uses Python and Selenium to simulate brute force attacks on websites. It locates username and password input fields, using credentials from a yaml file to test the site's authentication strength.

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

Personal learning project for mastering vulnerability testing, network security analysis, and DevOps automation using Breaking Point, Python, AWS, and Terraform

Personal cybersecurity homelab simulating enterprise security environments. Includes Active Directory, SIEM logging, attack simulation with Kali Linux, vulnerability testing, and detection engineering experiments. Documenting offensive and defensive security techniques.

Modern Purple Team Lab: Intentionally vulnerable Ubuntu 24.04 environment for security research, MITRE ATT&CK mapping, and SIEM detection engineering