Repository Index

A collection of various awesome lists for hackers, pentesters and security researchers

• hacking
• security
• bug-bounty
• awesome

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing

Web path scanner

• fuzzer
• fuzzing
• python
• security

A list of resources for those interested in getting started in bug bounties

• bug-bounty-hunters
• hackers
• xss
• bug-bounty

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

• application-security
• bug-bounty
• bug-bounty-hunting
• cybersecurity

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE

• awesome-lists
• voip-security
• hacking-voip
• sip-security

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security