#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
jonny-jhnson/telemetrysourceReference mapping Windows telemetry events—Sysmon, Security Auditing, and Threat Intelligence ETW—to underlying API functions, helping defenders…
coffinxp/img-payloadsCurated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…
hari-prasaanth/thick-client-pentest-checklistA OWASP Based Checklist With 80+ Test Cases
owasp/iot-security-verification-standard-isvsOWASP IoT Security Verification Standard (ISVS)
daffainfo/oneliner-bugbountyA collection oneliner scripts for bug bounty
awakecoding/wireshark-rdpWireshark RDP resources
securewithumer/cve-2026-pocsExploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and…
sofianehamlaoui/pentest-bookmarkzA collection of useful links for Pentesters
paddycahil/windows-api-function-cheatsheetsA reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…
hackinglz/extracteddefenderCollection of extracted Microsoft Defender data for security research purposes
balazsgerlei/androidsecurityevolutionSignificant security enchancements of recent major Android versions.
nullsecuritynet/toolsCurated collection of security tools, exploits, proof-of-concept code, shellcodes, and scripts for penetration testing and educational offensive…
synacktiv/mindmapsAzure mindmap for penetration tests
wietze/invoke-argfuscatorInvoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native…
rootsecdev/relay_bibleTechnical Reference to multiple relay techniques
hakluke/bug-bounty-standardsA list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific…
owasp/serverless-top-10-projectOWASP Serverless Top 10
nomi-sec/nvd-exploit-list-ja🔍NVD exploit & JVN(Japan Vulnerability Notes) easy description
