![](/assets/headers/header-logo.png)

![](https://img.shields.io/badge/Tools%20%26%20Resources%20Available-13-757575?style=for-the-badge)

## API

* [API Security Checklist](https://github.com/shieldfy/API-Security-Checklist) - Checklist of the most important security countermeasures when designing, testing, and releasing your API. ![GitHub last commit](https://img.shields.io/github/last-commit/shieldfy/API-Security-Checklist?style=flat) 
* [GraphQL OWASP](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html) - OWASP GraphQL cheat sheet. 
* [Microservices OWASP](https://cheatsheetseries.owasp.org/cheatsheets/Microservices_security.html) - Microservices Security
* [OWASP API Top 10](https://apisecurity.io/encyclopedia/content/owasp-api-security-top-10-cheat-sheet-a4.pdf) - OWASP API security Top 10. 
* [REST Security OWASP](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html) - OWASP REST security cheat sheet. 
* [REST Assessment OWASP](https://cheatsheetseries.owasp.org/cheatsheets/REST_Assessment_Cheat_Sheet.html) - OWASP REST assessment cheat sheet. 
* [Web API Pentesting](https://book.hacktricks.xyz/pentesting/pentesting-web/web-api-pentesting) - Web API pentesting GitBook. 

### Defensive Security

* [AD Killchain Attack & Defense](https://github.com/infosecn1nja/AD-Attack-Defense) - Attack and defend active directory using modern post exploitation adversary tradecraft activity. ![last-commit](https://img.shields.io/github/last-commit/infosecn1nja/AD-Attack-Defense?style=flat)

### Offensive Security

* [Active Directory](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet) - A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. ![last-commit](https://img.shields.io/github/last-commit/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet?style=flat)
* [Binary Exploitation](https://ir0nstone.gitbook.io/notes/) - Notes on binary exploitation. 
* [OWASP Cheat Sheet Series](https://github.com/OWASP/CheatSheetSeries) - Collection of high value information on specific application security topics. ![last-commit](https://img.shields.io/github/last-commit/OWASP/CheatSheetSeries?style=flat)
* [Red Teaming Experiments](https://www.ired.team/) - Various red teaming cheatsheets 
* [The Hacker Recipes](https://github.com/ShutdownRepo/The-Hacker-Recipes) - Project is aimed at providing technical guides on various hacking topics. ![last-commit](https://img.shields.io/github/last-commit/ShutdownRepo/The-Hacker-Recipes?style=flat)