A collection of various awesome lists for hackers, pentesters and security researchers
android security awesome reverse-engineering pentesting-windows hacking penetration-testing bug-bounty fuzzing
-
Updated
Jan 18, 2025
#
penetration-testing
Here are 3,260 public repositories matching this topic...
Language: All
Filter by language
Sort: Most stars
Sort options
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
security hacking web-application cheatsheet enumeration penetration-testing bounty vulnerability methodology bugbounty pentest bypass payload payloads hacktoberfest privilege-escalation redteam
-
Updated
Aug 14, 2025 - Python
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
training ai exploit hackers hacking artificial-intelligence cybersecurity penetration-testing exploits vulnerability awesome-list hacker vulnerability-management vulnerability-identification vulnerability-assessment ethical-hacking awesome-lists exploit-development ai-security hacking-series
-
Updated
Aug 30, 2025 - Jupyter Notebook
A collection of hacking / penetration testing resources to make you better!
exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux
-
Updated
Mar 12, 2024
A collection of hacking tools, resources and references to practice ethical hacking.
security roadmap hacking penetration-testing pentesting post-exploitation pentest exploitation hacking-tool frameworks information-gathering web-hacking hacktools
-
Updated
Oct 16, 2023
Web path scanner
python security scanner hacking wordlist enumeration penetration-testing bug-bounty fuzzing infosec pentesting bugbounty fuzzer brute appsec hacking-tool dirsearch pentest-tool redteam red-teaming
-
Updated
Jun 17, 2025 - Python
🐶 A curated list of Web Security materials and resources.
-
Updated
May 2, 2025
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
python instagram osint analysis tool hacking python3 penetration-testing instagram-api nickname information-gathering instagram-account osint-python
-
Updated
Aug 25, 2025 - Python
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
-
Updated
Apr 25, 2024 - PowerShell
Attack Surface Management Platform
security hacking cybersecurity penetration-testing pentesting pentest-scripts security-tools pentest-tool osint-framework attack-surface hacking-tools pentest-tools pentesting-tools sn1per sn1per-professional osint-tool bugbounty-platform attacksurface attack-surface-management
-
Updated
Jun 3, 2025 - Shell
A GPT-empowered penetration testing tool
-
Updated
Jul 29, 2025 - Python
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
security-audit static-analysis smart-contracts penetration-testing malware-analysis binary-analysis information-security exploitation-framework vulnerability-scanners wifi-security hacker-tools security-automation devsecops apk-analysis wifi-hacking pentesting-tools redteam-tools code-analyzer privacy-compliance
-
Updated
Aug 25, 2025
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Sep 1, 2025 - Dockerfile
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with...
osint scanner hacking penetration-testing bug-bounty infosec pentesting recon bugbounty scanning information-gathering rengine security-tools reconnaissance scanner-web recon-engine
-
Updated
Feb 24, 2025 - HTML
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
-
Updated
Sep 24, 2024 - PowerShell
Tools and Techniques for Red Team / Penetration Testing
windows linux tools hacking resources cheatsheet cybersecurity enumeration penetration-testing pentest payload red-team security-tools redteam mitre-attack pentest-tools red-team-tools
-
Updated
Mar 18, 2025
Gather and update all available and newest CVEs with their PoC.
security exploit hacking penetration-testing poc vulnerability infosec pentesting vulnerabilities cve software-security red-team security-tools software-vulnerability software-vulnerabilities latest-cve cve-poc
-
Updated
Sep 1, 2025 - HTML
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
exploit penetration-testing poc rce csrf cve bypass thinkphp cobalt-strike authentication-bypass getshell penetration-testing-poc csrf-webshell sql-poc poc-exp oa-getshell cve-cms php-bypass sql-getshell
-
Updated
Aug 4, 2025 - HTML
Infection Monkey - An open-source adversary emulation platform
-
Updated
May 1, 2025 - Python
Improve this page
Add a description, image, and links to the penetration-testing topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the penetration-testing topic, visit your repo's landing page and select "manage topics."