#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
hxnoyd/ossem-power-upA tool to assess data quality, built on top of the awesome OSSEM.
rdomanski/exploits_and_advisoriesRepository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.
opensourcemalware/polinriderTechnical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…
infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
t3l3m3try/threat_huntingSome Threat Hunting queries useful for blue teamers
ekitji/siemCurated SIEM queries and techniques for offensive discovery of Windows privilege escalation, misconfigured ACLs, services, scheduled tasks, and…
tsale/sigma_rulesSigma rules to share with the community
mr-r3b00t/cyber_rssa list of useful feeds
therealdreg/masm32-kernel-programmingmasm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
justinltodd/security-interview-questionsCurated infosec interview prep with Q&As covering core principles, audits, access control, and security architecture, plus links to study resources.
eclypsium/bootholeDetection scripts and mitigation resources for the BootHole vulnerability (CVE-2020-10713), including PowerShell and Bash tools to audit EFI System…
abertaymachinelearninggroup/network-threats-taxonomyMachine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic…
psiinon/open-source-llm-scannersCurated list of open-source LLM security scanners and web app scanners, ordered by stars, for finding vulnerabilities in AI applications.
bohops/dynamicdotnetA collection of various and sundry code snippets that leverage .NET dynamic tradecraft
dodo-sec/malware-analysisCurated collection of in-depth malware analysis write-ups organized as a reference for security researchers, reverse engineers, and incident…
pchaigno/dga-collectionA collection of known Domain Generation Algorithms
poshsec/poshsecframeworkA framework for PowerShell and PoshSec scripts for network management, security, and maintenance.
merces/awesome-hex-editorsA curated and enriched list of awesome hexadecimal editors for Windows, macOS, and Linux.
