A collection of various awesome lists for hackers, pentesters and security researchers
Repository Index
47,133 repositories indexed
1–24 of 1,054 · Most stars
✅ The Node.js best practices list (July 2026)
- nodejs
- javascript
- best-practices
- styleguide
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
JavaScript API for Chrome and Firefox
- headless-chrome
- testing
- web
- developer-tools
Hunt down social media accounts by username across social networks
Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation
- storybook
- styleguide
- testing
- components
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
- api
- api-client
- api-rest
- pwa
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Fast, easy and reliable testing for anything that runs in a browser.
- cypress
- end-to-end-testing
- angular-testing-library
- component-testing
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
- api-client
- git
- graphql-client
- opensource
Delightful JavaScript Testing.
- javascript
- testing
- painless-javascript-testing
:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.
An AI prompt optimizer for writing better prompts and getting better AI results.
- llm
- prompt
- prompt-engineering
- prompt-optimization
GoogleTest - Google Testing and Mocking Framework
🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
Curso para aprender el lenguaje de programación Python desde cero y para principiantes. 100 clases, 44 horas en vídeo, código, proyectos y grupo de chat. Fundamentos, frontend, backend, testing, IA...
"Vibe-Trading: Your Personal Trading Agent"
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
A modern load testing tool, using Go and JavaScript
- golang
- load-testing
- load-generator
- javascript