hacking

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

OSINT Tool: Generate username lists for companies on LinkedIn

Real-world infosec wordlists, updated regularly

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

jSQL Injection is a Java application for automatic SQL database injection.

The Most Comprehensive Docker Security Scanner

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack tool!! Operating System Requirements works on any of the following operating systems: • Android • Linux • Unix

🔪 :octocat: Leak git repositories from misconfigured websites

Asset inventory of over 800 public bug bounty programs.

A portable, simple zip library written in C

A curated list of awesome privilege escalation

A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension.

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Attack surface mapping

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

Awesome Vulnerable Applications

记录自己编写、修改的部分工具

Generates millions of keyword-based password mutations in seconds.

SSH based reverse shell

An XSS exploitation command-line interface and payload generator.

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords