Collections · For engineers
Security Starter Kit
References and scanners for building software defensively and testing systems you are authorised to test.
Last reviewed Oct 2, 2026. Open in the explorer to search and filter within it.
- 1
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Concise guidance on specific application security topics.
- 2
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
A reference of payloads and bypass techniques for security testing.
- 3
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Wordlists used during security assessments.
- 4
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Template-driven vulnerability scanning.
- 5
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Scans containers, dependencies, and infrastructure code for known issues.
- 6
Find secrets with Gitleaks 🔑
Finds secrets committed to Git repositories.