awesome-ethical-hacking-resources
husnainfareed/awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
ctfcurated-resourceseducation+7
3.8k
husnainfareed/awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
nu11secur1ty/rtfmComprehensive book on penetration testing and red teaming operations, covering exploitation, post-exploitation, and adversary simulation techniques…
mouteee/autonomous-offensive-llm-handbookA deterministic harness and handbook for autonomous offensive LLM agents, enforcing authorization, scope, and evidence gates to ensure reproducible…
enovella/tee-reversingA curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
zalexdev/wpair-appWPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This…
canyie/cve-2024-0044Proof-of-concept and writeup for bypassing the initial patch of CVE-2024-0044, an Android framework vulnerability enabling privilege escalation from…
owasp/masweOWASP enumeration of common security and privacy weaknesses in mobile applications, serving as a reference bridging the MASVS verification standard…
frenchyeti/rasputinRessources and papers related to my conferences and work on (un)RASPs. These work is in progress, please be patient :) Don't hesitate to contribute /…
project-artist/artistOpen-source instrumentation framework for Android apps and Java middleware, modifying code during on-device compilation via the ART compiler.…
michalbednarski/resourcepoisonWriteup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…
michalbednarski/thelastbundlemismatchWriteup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation
ablation-tool/ablationReverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…
amnestytech/inside-pegasusA curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…
thomasking2014/slidesCurated collection of security conference slide decks covering Android rooting, kernel exploitation, browser memory corruption, JIT mitigations, and…
a23bc/op13-cve-2026-64560Device-specific Android kernel exploit for CVE-2026-64560 on OnePlus 13 builds, providing temporary root via ADB shell with verified payloads and…
cxxsheng/cve-2022-20474Detailed technical analysis and proof-of-concept for Android CVE-2022-20474, a Bundle mismatch vulnerability exploiting LazyValue with negative…
isec-tugraz/file-notification-attacksResearch artifacts for file-notification side-channel attacks on Linux, Windows, and macOS, demonstrating inotify/FSEvents leakage, keystroke timing,…
zhubaohe123/ghostlock-kitOne-click root kit for vivo iQOO Neo9S Pro (MT6989) exploiting CVE-2026-43499 futex PI UAF via MCAST transport, with scripts and analysis docs.