A collection of various awesome lists for hackers, pentesters and security researchers
Repository Index
47,133 repositories indexed
1–24 of 42 · Most stars
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Web path scanner
Fast passive subdomain enumeration tool.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
An HTTP toolkit for security research.
A list of resources for those interested in getting started in bug bounties
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The recursive internet scanner for hackers. 🧡
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A list of interesting payloads, tips and tricks for bug bounty hunters.
Scanning APK file for URIs, endpoints & secrets.
A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
Automated Αll-in-One OS command injection exploitation tool.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Automated NoSQL database enumeration and web application exploitation tool.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
A big list of Android Hackerone disclosed reports and other resources.
Security Tool to Look For Interesting Files in S3 Buckets