#1Curated cybersecurity lists, collections, and learning references with clear scope and practical value.
Kitploit recommended
hahwul/webhackersweapons⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
s1ckb0y1337/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
mr-xn/burpsuite-collections有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using…
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
snailsploit/claude-redCurated library of 78 offensive security SKILL.md modules that prime Claude with expert red team methodology across web, AD, wireless, cloud, and…
togg53192-cmd/jailbreaksCurated collection of LLM jailbreak prompts and bypass techniques, documenting adversarial inputs that circumvent AI model safety guardrails.
edoverflow/bugbounty-cheatsheetA list of interesting payloads, tips and tricks for bug bounty hunters.
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
gmh5225/awesome-game-securityCurated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…
blackorbird/apt_reportInteresting APT Report Collection And Some Special IOCs
jakejarvis/awesome-shodan-queries🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
paragonie/awesome-appsecA curated list of resources for learning about application security
tennc/webshellThis is a webshell open source project
secwiki/linux-kernel-exploitslinux-kernel-exploits Linux平台提权漏洞集合
a-poc/blueteam-toolsTools and Techniques for Blue Team / Incident Response
daffainfo/allaboutbugbountyAll about bug bounty (bypasses, payloads, and etc)
devsecops/awesome-devsecopsAn authoritative list of awesome devsecops tools with the help from community experiments and contributions.
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
