A collection of various awesome lists for hackers, pentesters and security researchers
Repository Index
47,133 repositories indexed
1–24 of 48 · Most stars
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
- agent-framework
- pydantic
- python
- genai
A collection of hacking / penetration testing resources to make you better!
- ctf
- hacking
- privilege-escalation
- reverse-engineering
📚 Study guide and introduction to the modern front end stack.
- front-end
- grab
- engineering
- study-plan
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.
Point Claude at any game. Skills, tools and the fal MCP that let Claude Code mod almost any PC game you own: recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos.
- age-of-empires
- claude-code
- claude-code-plugin
- fal
Accessibility engine for automated Web UI testing
Entitas is a super fast Entity Component System (ECS) Framework specifically made for C# and Unity
A collection of public resources about how software companies test their software
- testing
- companies
- testing-practices
- quality
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
- mock-server
- proxy
- java-client
- javascript-client
Chaos testing, network emulation, and stress testing tool for containers
- docker
- chaos
- network-emulator
- testing-tools
Godot Unit Test. Unit testing tool for Godot Game Engine.
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
:books: The starting point of your career as a Software Quality Assurance Engineer | Quality Automation Engineer :books:
A Claude Code skill that reverse-engineers any animation frame by frame, then proves the copy moves the same.
- agent-skills
- animation
- claude-code
- claude-skills
Chaos engineering tool for simulating real-world distributed system failures
The most over-engineered C++ assertion library
- cpp
- assertions
- diagnostics
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation