#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
reddelexc/hackerone-reportsCurated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…
juliocesarfort/public-pentesting-reportsA list of public penetration test reports published by several consulting firms and academic security groups.
calesthio/crucixYour personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
nahamsec/resources-for-beginner-bug-bounty-huntersA list of resources for those interested in getting started in bug bounties
ytisf/thezooCurated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…
infoslack/awesome-web-hackingCurated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…
apsdehal/awesome-ctfA curated list of CTF frameworks, libraries, resources and softwares
data-privacy-stack/presidioAn open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports…
ignitetechnologies/mindmapThis repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give…
0xinfection/awesome-wafEverything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
google/security-researchThis project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned…
secwiki/windows-kernel-exploitswindows-kernel-exploits Windows平台提权漏洞集合
shellphish/how2heapA repository for learning various heap exploitation techniques.
trimstray/test-your-sysadmin-skillsA collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.
nomi-sec/poc-in-github📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
