Tools

rawfilejson/awesome-osint-arsenal

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

hack-with-github/awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

swisskyrepo/payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

google/fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

ethanolivertroy/hackspacecon-2023

Workshop & Talk Slide Decks from HackSpaceCon

stypr/chall.stypr.com

Stereotyped Challenges (2014~2023)

projectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

blackberry/threat-research-and-intelligence

BlackBerry Threat Research & Intelligence

snoopysecurity/broken-vulnerable-code-snippets

A small collection of vulnerable code snippets

owasp/threat-model-cookbook

This project is about creating and publishing threat model examples.

google/kernel-sanitizers

Linux Kernel Sanitizers, fast bug-detectors for the Linux kernel

offensive-security/exploitdb-bin-sploits

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb-bin-sploits

rcesecurity/advisories

Security Advisories

medicean/vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

serhalp/test-cve-2025-29927

Verify Next.js CVE-2025-29927 on Netlify not vulnerable

przemoc/xz-backdoor-links

apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links

leetxyz/cve-2021-44228-advisories

List of company advisories log4j

ansvar-systems/eu_compliance_mcp

EU focused compliance MCP server