Marcin Niemiec

reactive-resume. A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

supply-chain-firewall. Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages :fire:

stride-gpt. An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

customizable-gpt-chatbot. Veldra — talk an agent into existence, then watch it grow. A self-hostable, local-first agent platform: describe what you need in plain language and it compiles a working agent tools, MCP, RAG, teams. The more you use it, the better it gets agents learn from your feedback and reshape as you talk.

Chat-with-Github-Repo. This repository contains two Python scripts that demonstrate how to create a chatbot using Streamlit, OpenAI GPT-3.5-turbo, and Activeloop's Deep Lake.

ai-pdf-chatbot-langchain. AI PDF chatbot agent built with LangChain & LangGraph

knowledge. Knowledge is a tool for saving, searching, accessing, exploring and chatting with all of your favorite websites, documents and files.

hackerone-reports. Top disclosed reports from HackerOne

TicTaaC. Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

threat-modelling-resources. These are the few of my favourite things

AllAboutBugBounty. All about bug bounty (bypasses, payloads, and etc)

wrongsecrets. Vulnerable app with examples showing how to not use secrets

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

relevant-wordlist. A wordlist that is kept up to date with the latest headlines to provide relevant words to human society

Web-Attack-Cheat-Sheet. Web Attack Cheat Sheet

OneListForAll. Rockyou for web fuzzing

pentest-book.

reconftw. reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

fuzzDicts. You Know, For WEB Fuzzing !

FinalRecon. All In One Web Recon

cariddi. Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

lynis. Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

awesome-hacker-note-taking. Awesome note-taking apps for hackers & pentesters !

ripgrep-all. rga: ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc.

MixewayScanner. Mixeway Scanner is Spring Boot application which aggregate integration with number of OpenSource Vulnerability scanners - both SAST and DAST types

TukTuk. Tool for catching and logging different types of requests.

Bug-Bounty-Roadmaps. Bug Bounty Roadmaps

Tentacle. Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

LKWA. Lesser Known Web Attack Lab

breaking-and-pwning-apps-and-servers-aws-azure-training. Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

Coursera_Assignment5. Anagrams