#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
juliocesarfort/public-pentesting-reportsA list of public penetration test reports published by several consulting firms and academic security groups.
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
projectdiscovery/katanaA next-generation crawling and spidering framework.
nahamsec/resources-for-beginner-bug-bounty-huntersA list of resources for those interested in getting started in bug bounties
smicallef/spiderfootAutomates OSINT data collection and analysis for threat intelligence, attack surface mapping, and reconnaissance. Integrates 200+ modules for DNS,…
cisofy/lynisAgentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…
infoslack/awesome-web-hackingCurated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…
projectdiscovery/subfinderFast passive subdomain enumeration tool.
ffuf/ffufFast web fuzzer written in Go
apsdehal/awesome-ctfA curated list of CTF frameworks, libraries, resources and softwares
owasp/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
ignitetechnologies/mindmapThis repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give…
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
trustedsec/social-engineer-toolkitThe Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
greydgl/pentestgptAutomated Penetration Testing Agentic Framework Powered by Large Language Models
nvidia/garakModular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…
