Awesome-Hacking
hack-with-github/awesome-hackingA collection of various awesome lists for hackers, pentesters and security researchers
osintreverse-engineeringweb-security+6
118.0k
Tools for testing, exploiting, and securing web applications and APIs.
hack-with-github/awesome-hackingA collection of various awesome lists for hackers, pentesters and security researchers
owasp/cheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
caddyserver/caddyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
d4vinci/scrapling🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!
symfony/symfonyThe Symfony PHP framework
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
0x4m4/hexstrike-aiMCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…
naibowang/easyspiderA visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/网页爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。