#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
cipher387/osint_stuff_tool_collectionCurated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.
thehackingsage/hackdroidCurated catalog of 364 Android pentesting and security APKs organized by category, covering forensics, MITM, sniffing, OSINT, wireless, and privacy…
frostbits-security/mitm-cheatsheetCheatsheet cataloging man-in-the-middle attacks across L2-L4 and wireless layers, with attack tools, detection methods, and mitigation techniques for…
damonmohammadbagher/ebook-bypassingavsbycsharpeBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)
jaredreabow/reverse-engineering-with-aiResearch methods for reverse engineering encrypted firmware and software with AI-assisted analysis, independent validation, and public-source…
zishanadthandar/pentestJekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…
secprbench/secprbenchBenchmark of 265 real vulnerability-introducing code changes across nine C, C++, and Rust projects, with paired review tasks, Docker sandbox, judge,…
domssilva/vulnsearchA deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books,…
dev-angelist/ejptv2-noteseLearnSecurity Junior Penetration Tester (eJPT) v2 Notes
gmh5225/oz-known-issuesFind the version that the project you currently develop or audit uses and quickly check which are the known smart contract security vulnerabilities…
canonical/ubuntu-security-noticesUbuntu vulnerability dataset publishing USN/LSN security notices in OSV and OpenVEX JSON formats for automated vulnerability and VEX-aware dependency…
github/advisory-databaseSecurity vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
doctorwebltd/malware-iocsCurated Indicators of Compromise (IOCs) from Doctor Web malware investigations, published for threat intelligence, detection engineering, and…
proviesec/xss-payload-listCurated collection of cross-site scripting payloads, polyglots, and injection test rules for web application penetration testing and bug bounty…
ardakocadoru/xss-cheatsheetComprehensive XSS reference covering reflected, stored, DOM and blind payloads, filter bypass, WAF evasion, CSP bypass, mXSS, and real-world CVE case…
owasp/agentic-evidenceOWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…
owasp/robotics-security-testing-guideOWASP guide defining a standardized penetration testing methodology for humanoid, industrial, and autonomous robots, covering ROS/ROS2, DDS, CAN bus,…
owasp/the-agents-epistemic-baggageAn audit-oriented risk model for how agent-generated inferences can change epistemic status, gain operational authority, and influence later…
