Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
A curated index of GitHub repositories covering computer security, hacking, penetration testing, and security research topics.
Awesome Hacking is a curated list of links, not a piece of software. The repository describes itself as a collection of awesome lists for hackers, pentesters, and security researchers — so it is essentially an index of other index repositories, each one focused on a different corner of computer security. There is no installation step; you just read it on GitHub and click through to whichever topic you want to learn about. The README is mostly a large table where every row points to a separate community-maintained list. The topics span a wide range, including Android security, application security, asset discovery, bug bounty programs, cellular and 5G security, CI/CD attacks, capture-the-flag competitions, free cybersecurity learning resources, detection engineering, DevSecOps, drone hacking, embedded and IoT security, fuzzing, honeypots, incident response, industrial control systems, malware analysis, OSINT or open-source intelligence, OSX and iOS security, password cracking, network packet capture tooling, penetration testing, prompt injection against AI and LLM systems, real-time communications and VoIP, red teaming, reverse engineering, social engineering, static analysis tools, threat intelligence, vehicle and car hacking, web and web3 application security, and YARA rules. A second table points to other useful repositories such as AI security resources, annual security reports, API security checklists, and write-ups of past attack campaigns. Someone would use this when they are starting out in security and want a map of where the deeper resources live, or when they are an experienced practitioner looking for a fresh list on a topic they have not worked in before.
Where it fits
- Build a learning path for offensive or defensive security skills by exploring curated repositories.
- Find specialized tools and resources for penetration testing, bug bounty hunting, or security research.
- Discover repositories on specific security topics like malware analysis, OSINT, reverse engineering, or Web3 security.