A collection of various awesome lists for hackers, pentesters and security researchers
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
- agent-framework
- pydantic
- python
- genai
A collection of hacking / penetration testing resources to make you better!
- ctf
- hacking
- privilege-escalation
- reverse-engineering
📚 Study guide and introduction to the modern front end stack.
- front-end
- grab
- engineering
- study-plan
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.
A collection of public resources about how software companies test their software
- testing
- companies
- testing-practices
- quality
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
- mock-server
- proxy
- java-client
- javascript-client
Chaos testing, network emulation, and stress testing tool for containers
- docker
- chaos
- network-emulator
- testing-tools
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
:books: The starting point of your career as a Software Quality Assurance Engineer | Quality Automation Engineer :books:
Chaos engineering tool for simulating real-world distributed system failures
The most over-engineered C++ assertion library
- cpp
- assertions
- diagnostics
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Continuous Regression Testing for Engineering Teams
- open-source
- regression-testing
- developer-tools
- performance-testing
A curated collection of publicly available resources on how companies around the world perform load testing
- performance-testing
- load-testing
- best-practices
- performance-engineering
High-performance, multi-protocol mock server. HTTP, WebSocket, gRPC, MQTT, SSE, GraphQL, SOAP in one binary.
- api-mocking
- cli
- developer-tools
- golang
testcase is an opinionated testing framework to support test driven design.
Swagger/YApi convert jmx tool.
- swagger-ui
- jmeter
- jmx
- convert
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
- clickhouse
- data-engineering
- data-generation
- devops
A lightweight Snowflake emulator built with Go and DuckDB for local development and testing
A curated, opinionated collection of tools and resources dedicated to Performance Engineering, covering both Observability and Performance Testing.