
Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers

A collection of various awesome lists for hackers, pentesters and security researchers

Practical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.

Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering,…

Some good resources for getting started with application security

A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A collection of awesome penetration testing resources and tools

Community-maintained Markdown knowledge base covering cybersecurity foundations, offensive and defensive practice, governance, threat intelligence,…

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

Curated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…

A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…

Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems

OWASP hands-on Android security training lab with 78 MASVS/MASTG modules pairing vulnerable, secure, and attacker apps to demonstrate mobile…