Awesome-Hacking-Resources - A collection of hacking / penetration testing reso

项目说明

<h1 align="center">
<br>
<img width="200" src=" alt="awesome">
<br>
</h1>

<di="center">

<h1>Awesome Hacking Resources</h1>

<p><strong>A curated collection of hacking, penetration testing, and AI red-teaming resources to make you better.</strong></p>

<p>
<a href=" src=" alt="Awesome"></a>
<img src=" alt="Stars">
<img src=" alt="Forks">
<img src=" alt="Contributors">
<img src=" alt="Last commit">
<img src=" alt="License">
<a href="contributing.md"><img src=" alt="PRs welcome"></a>
</p>

<p>Let's make it the biggest resource repository for our community.<br>
You are welcome to fork and <a href="contributing.md">contribute</a>.</p>

</div>

We also maintain a companion tools list — contributions welcome there too.

Table of Contents

* 📚 Learning the Skills
* 🎥 YouTube Channels
* Companies
* Conferences
* NEWS
* 🎯 Sharpening Your Skills
* 🧬 Reverse Engineering, Buffer O and Exploit De
* ⬆️ Pri Escalation
* 🕵️ OSINT
* 🛰️ Network Scanning / Reconnaissance
* 🦠 Malware Analysis
* 🤖 AI Security / AI Red Teaming
* 🌐 Web Application
* 🖥️ OS
* 💥 Exploits
* 💬 Forums
* 🎬 Archi Conference
* 👥 Online Communities
* 📰 Online News Sources
* 🐧 Linux Penetration Testing OS

📚 Learning the Skills

Name | Description
---- | ----
CS 642: Intro to Computer Security | academic content, full semester course, includes assigned readings, homework and github refs for exploit examples. NO VIDEO LECTURES.
CyberSec WTF | CyberSec WTF Web Hacking Challenges from Bounty write-ups
Cybrary | coursera style website, lots of user-contributed content, account required, content can be filtered by experience level
Free Cyber Security Training | Academic content, 8 full courses with from a quirky instructor sam, links to research, defcon materials and other recommended training/learning
Hak5 | podcast-style co topics, has a forum, "metasploit-minute" video series could be useful
Hopper's Roppers Security Training | Four free self-paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
Mind Maps | Information Security related Mind Maps
MIT OCW 6.858 Computer Systems Security | academic content, well organized, full-semester course, includes assigned readings, lectures, , required lab files.
OWASP top 10 web security risks | free courseware, requires account
Seed Labs | academic content, well organized, featuring lab , tasks, needed 代码 files, and recommended readings
TryHackMe | Designed prebuilt challenges which include machines ( in the cloud ready to be deployed

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🎥 YouTube Channels

Name | Description
---- | ----
0patch by ACROS Security | few , very short, specific to 0patch
BlackHat | features talks from the BlackHat conferences around the world
Christiaan008 | hosts a of on security topics, disorganized
| <td colspan="2" > Companies </td>
Detectify | very short , aimed at showing how to use Detictify scanner
Hak5 | see Hak5 above
Kaspersky Lab | lots of Kaspersky promos, some hidden cybersecurity gems
Metasploit | collection of medium length metasploit demos, ~25minutes each, instructional
ntop | 网络 monitoring, packet analysis, instructional
n | Some nVisum promos, a handful of instructional series on Rails vulns and web hacking
OpenNSM | 网络 analysis, lots of TCPDUMP , instructional,
OWASP | see OWASP above
Rapid7 | brief , promotional/instructional, ~ 5 minutes
Securelist | brief , interviews discussing cyber security topics
Segment Security | promo , non-instructional
SocialEngineerOrg | podcast-style, instructional, lengthy content ~1 hr each
Sonatype | lots of random , a good cluster of DevOps related content, large range of lengths, disorganized
SophosLabs | lots of brief, news-style content, "7 Deadly IT Sins" segment is of note
Sourcefire | lots of brief co topics like botnets, DDoS ~5 minutes each
Station X | handful of brief , disorganized, unscheduled content updates
Synack | random, news-style , disorganized, non-instructional
TippingPoint Zero Day Initiative | very brief ~30 sec, somewhat instructional
Tripwire, Inc. | some tripwire demos, and random news-style , non-instructional
Yiu | handful of from a single hacker, instructional
| <td colspan="2"> Conferences </td>
44contv | in
MIT OCW 6.858 Computer Systems Security |Information security con based in London, lengthy instructional
BruCON Security Conference | security and hacker conference based in b\Belgium, lots of lengthy instructinoal
BSides Manchester | security and hacker con based in Mancheseter, lots of lengthy
BSidesAugusta | security con based in Augusta, Georgia, lots of lengthy instructional
CarolinaCon | security con based in North Carolina, associated with 2600 chapters, lots of lengthy instructional content
Cort Johnson | a handful of lengthy con-style talks from Hack Secure Opensec 2017
De | lenghty con co De, making software more secure
Garage4Hackers - Information Security | a handful of lengthy , About section lacks description
HACKADAY | lots of random tech content, not strictly infosec, some instructional
Hack In The Box Security Conference | lengthy con-style instructional talks from an international security con
Hack in Paris | security con based in paris, features lots of instructional talks, slides can be difficult to see.
Hacklu | lots of lengthy con-style instructional
Hacktivity | lots of lengthy con-style instructional from a con in central/eastern europe
Hardwear.io | handful of lengthy con-style video, emphasis on hardware hacks
IEEE Symposium on Security and Privacy | content from the symposium; IEEE is a professional association based in the us, they also publish journals
LASCON | lengthy con-style talks from an OWASP con held in Austin, TX
leHACK | leHACK is the oldest ( 2003 ), leading, security conference in Paris, FR
Marcus Niemietz | lots of instructional content, associated with HACKPRA, an offensi course from an institute in Germany
Media.ccc.de | The real official channel of the chaos computer club, operated by the CCC VOC - tons of lengthy con-style vids
NorthSec | lengthy con-style talks from an applied security conference in Canada
Pancake Nopcode | channel of Radare2 whiz Sergi "pancake" Alvarez, Reverse Engineering Content
Psiinon | medium length instructional , for the OWASP Zed Attack Proxy
SJSU Infosec | handful of lengthy instructional from San Jose State uni Infosec
Secappdev.org | tons of lengthy instructional lectures on Secure App De
Security Fest | medium length con-style talks from a security festival in Sweden
SecurityTubeCons | an assortment of con-style talks from cons including BlackHat and Shmoocon
ToorCon | handful of medium length con from con based in San Diego, CA
USENIX Enigma Conference | medium length "round table discussion with leading experts", content starts in 2016
ZeroNights | a lot of con-style talks from international conference ZeroNights
| <td colspan = "2"> News </td>
0x41414141 | Channel with couple challenges, well explained
Adrian Crenshaw | lots of lengthy con-style talks
Corey Nachreiner | security newsbites, 2.7K subscribers, 2-3 a week, no set schedule
BalCCon - Balkan Computer Congress | Long con-style talks from the Balkan Computer Congress, doesn't update regularly
danooct1 | lots of brief screenshot, how-to vids regarding malware, regular content updates, 186K followerss
DedSec | lots of brief screenshot how-to vids based in Kali, no recent posts.
DEFCON Conference | lots of lengthy con-style vids from the iconical DEFCON
DemmSec | lots of pen testing vids, somewhat irregular uploads, 44K followers
Derek Rook - CTF/Boot2root/wargames Walkthrough | lots of lengthy screenshot instructional vids, with
Don Does 30 | amateur pen-tester posting lots of brief screenshot vids regularly, 9K Followers
Error 404 Cyber News | short screen-shot with loud metal, no dialog, bi-weekly
Geeks Fort - KIF | lots of brief screenshot vids, no recent posts
Gyn | Security streams from Google Researcher. Mainly about CTFs, computer security, programing and similar things.
HackerSploit | regular posts, medium length screenshot vids, with dialog
HACKING TUTORIALS | handful of brief screenshot vids, no recent posts.
iExplo1t | lots of screenshot vids aimed at novices, 5.7K Followers, no recent posts
JackkTutorials | lots of medium length instructional vids with some AskMe vids from the youtuber
John Hammond | Solves CTF problems. contains penTesting tips and tricks
LionSec | lots of brief screenshot instructional vids, no dialog
Li | Lots of brief-to-medium instructional vids, co things like buffer o and exploit writing, regular posts.
Metasploitation | lots of screenshot vids, little to no dialogue, all about using Metasploit, no recent vids.
NetSecNow | channel of pentesteruni.org, seems to post once a month, screenshot instructional vids
Open SecurityTraining | lots of lengthy lecture-style vids, no recent posts, but quality info.
Pentester Academy TV | lots of brief , very regular posting, up to +8 a week
Penetration Testing in Linux | DELETE
rwbnetsec | lots of medium length instructional co tools from Kali 2.0, no recent posts.
Samy Kamkar's Applied Hacking | brief to medium length instructional vids from the creator of PoisonTap for the Raspberry Pi Zero, no recent content, last updated in 2016
SecureNinjaT news bites, irregular posting, 18K followers
Security Weekly | regular updates, lengthy podcast-style interviews with industry pros
Seytonic | of DIY hacking tutorials, hardware hacks, regular updates
Shozab Haxor | lots of screenshot style instructional vids, regular updates, windows CLI tutorial
SSTec Tutorials | lots of brief screenshot vids, regular updates
Tradecraft Security Weekly | Want to learn about all of the latest security tools and techniques?
Troy Hunt | lone youtuber, medium length news , 16K followers, regular content
Waleed Jutt | lots of brief screenshot vids co web security and 游戏 programming
webpwnized | lots of brief screenshot vids, some CTF walkthroughs
Zer0Mem0ry | lots of brief c++ security , programming intensive
LionSec | lots of brief screenshot instructional vids, no dialog
Adrian Crenshaw | lots of lengthy con-style talks
HackerSploit | regular posts, medium length screenshot vids, with dialog
Derek Rook - CTF/Boot2root/wargames Walkthrough | lots of lengthy screenshot instructional vids, with
Tradecraft Security Weekly | Want to learn about all of the latest security tools and techniques?
IPPSec | Hackthebox.eu retired machine machine walkthroughs to help you learn both basic and ad processes and techniques
The Daily Swig | Latest Cybersecurity News
Awesome Worldwide ITSec Specialists | curated index of non-English-speaking IT security YouTubers and creators

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🎯 Sharpening Your Skills

Name | Description
---- | ----
The cryptopals crypto challenges | A bunch of CTF challenges, all focused on cryptography.
Crackmes.one | This is a simple place where you can download crackmes to improve your reverse engineering skills.
CTFLearn | an account-based ctf site, where users can go in and solve a range of challenges
CTFs write-ups | a collection of writeups from CTFs, organized by
CTF365 | account based ctf site, awarded by Kaspersky, MIT, T-Mobile
The enigma group | web application security training, account based, video tutorials
Exploit exercises | hosts 5 fulnerable machines for you to attack, no account required
Google CTF | 源码 代码 of Google 2017, 2018 and 2019 CTF
Google CTF 2019 | 2019 edition of the Google CTF contest
Google's XSS game | XSS challenges, and potentially a chance to get paid!
Hack The Box | Pen testing labs hosting over 39 machines with two additional added every month
Hacker test | similar to "hackthissite", no account required.
Hacksplaining | a clickthrough security informational site, very good for beginners.
hackburger.ee | hosts a number of web hacking challenges, account required
Hack this site! | an oldy but goodie, account required, users start at low levels and progress in difficulty
Lin.security | Practice your Linux pri escalation
Over the wire | A CTF that's based on progressi for each lab, the users SSH in, no account recquired
Participating Challenge Sites | aims at creating a uni ranking for CTF participants
PentesterLab | hosts a of exercises as well as "bootcamps" focused on specific acti
Pentest.training | lots of labs/VMS for you to try and hack, registry is optional.
PicoCTF | CTF hosted by Carnegie Mellon, occurs yearly, account required.
pwnable.kr | Don't let the cartoon characters fool you, this is a serious CTF site that will teach you a lot, account required
pwnable.tw | hosts 27 challenges accompanied with writeups, account required
Ringzer0 Team | an account based CTF site, hosting over 272 challenges
ROP Emporium | Return Oriented Programming challenges
SmashTheStack | hosts challenges, similar to O, users must SSH into the machines and progress in levels
| site hosts a ton of different Machine images, download and get hacking
websec.fr | Focused on web challenges, registration is optional.
tryhackme | Awesome platform to start learning cybersecurity, account is needed
webhacking.kr | lots of web security challenges are a, recommended for beginners. You need to solve a simple challenge to sign up.
Stripe CTF 2.0 | Past security contest where you can discover and exploit in mock web applications.
Windows / Linux Local Pri Escalation Workshop | Practice your Linux and Windows pri escalation
Hacking Articles | CTF Brief Write up collection with a lot of screenshots good for begginers
Hacker101 CTF | CTF hosted by HackerOne, always online. You will recei to some private programs on HackerOne platform as a reward.
Hacking Lab | European platform hosting lots of riddles, challenges and competitions
Portswigger Web Security Academy | Best free platform for learning web pentesting, account required
CTF 101 | Intro guide to CTFs co common categories (crypto, forensics, web, pwn, RE) with worked examples
Hopper's Roppers CTF | Self-paced CTF course companion to the Hopper's Roppers training
HTB Writeups | The most comprehensive Hack The Box writeup collection with 500+ machines, 400+ challenges, ProLabs, Sherlocks, CTF events, and cheatsheets

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🧬 Reverse Engineering, Buffer O and Exploit De

Name | Description
---- | ----
A Course on Intermediate Le Exploitation | as the title says, this course isn't for beginners
Binary hacking | 35 "no bullshit" binary along with other info
Corelan tutorials | detailed tutorial, lots of good information about memory
Exploit tutorials | a series of 9 exploit tutorials,also features a podcast
Exploit de | links to the forum's exploit de, quality and post style will vary with each poster
flAWS challenge | Through a series of levels you'll learn about common mistakes and gotchas when using Amazon Web Services (AWS).
Introduction to ARM Assembly Basics | tons of tutorials from infosec pro Azeria, follow her on twitter
Introductory Intel x86 | 63 days of OS class materials, 29 classes, 24 instructors, no account required
Linux (x86) Exploit De Series | blog post by sploitfun, has 3 different levels
Megabeets journey into Radare2 | one user's radare2 tutorials
Modern Binary Exploitation - CSCI 4968 | RE challenges, you can download the files or download the by RPISEC specifically for challenges, also links to their home page with tons of infosec lectures
Recon.cx - re conference | the conference site contains recordings and slides of all talks!!
Reverse Engineering for Beginners | huge textbook, created by Dennis Yuriche
Reverse engineering reading list | a github collection of RE tools and books
Reverse Engineering challenges | collection of challenges from the writer of RE for Beginners
Reverse Engineering for Beginners (book site) | official site for Dennis Yurichev's book, all formats and 源码 a
Reverse Engineering Malware 101 | intro course created by Malware Unicorn, complete with material and two VM's
Reverse Engineering Malware 102 | the sequel to RE101
re.kr challenges | reverse engineering challenges in difficulty
Shell storm | Blog style collection with organized info about Re.
Shellcode Injection | a blog entry from a grad student at SDS Labs
Micro Corruption — Assembly | CTF designed to learn Assembly by practicing

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

⬆️ Pri Escalation

Name | Description
---- | ----
A GUIDE TO LINUX PRI ESCALATION | Basics of Linux pri escalation
Abusing SUDO (Linux Pri Escalation) | Abusing SUDO (Linux Pri Escalation)
AutoLocalPri | automated scripts that downloads and compiles from exploitdb
Basic linux pri escalation | basic linux exploitation, also covers Windows
Windows Local Pri Escalation (HackTricks) | Comprehensi checklist of Windows pri escalation
Editing /etc/passwd File for Pri Escalation | Editing /etc/passwd File for Pri Escalation
Linux Pri Escalation | Linux Pri Escalation – Tradecraft Security Weekly (Video)
Linux Pri Escalation Check Script | a simple linux PE check script
Linux Pri Escalation Scripts | a list of PE checking scripts, some may ha been covered
Linux Pri Escalation Using PATH | Linux Pri Escalation Using PATH
Linux Pri Escalation using Misconfigured NFS | Linux Pri Escalation using Misconfigured NFS
Linux Pri Escalation Linked Shared Object Library | How RPATH and Weak File Permissions can lead to a system compromise.
Local Linux Enumeration & Pri Escalation Cheatsheet | good resources that could be compiled into a script
PEASS-ng (Pri Escalation Awesome Scripts) | actively maintained pri escalation enumeration scripts for Windows, Linux, and macOS
Linux Pri Escalation (HackTricks) | extensi reference co common Linux pri escalation methods with examples
RootHelper | a 工具 that runs enumeration scripts to check for pri escalation
Unix privesc checker | a script that checks for PE on a system
Windows exploits, mostly precompiled. | precompiled windows exploits, could be useful for reverse engineering too
Windows Pri Escalation | collection of wiki pages co Windows Pri escalation
Windows pri escalation checker | a list of topics that link to pentestlab.blog, all related to windows pri escalation
Windows Pri Escalation Fundamentals | collection of great info/tutorials, option to contribute to the creator through patreon, creator is an OSCP
Windows Pri Escalation Guide | Windows Pri Escalation Guide
Windows Pri Escalation Methods for Pentesters | Windows Pri Escalation Methods for Pentesters

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🕵️ OSINT

Name | Description
---- | ----
theHar | E-mail, subdomain, host and people-name har using public sources
Maltego CE | Graph-based link-analysis platform for OSINT and forensics; Community Edition is free
Recon-ng | Full-featured web reconnaissance 框架 written in Python
SpiderFoot | Automated OSINT collection with 200+ modules and a web UI
Intel Techniques Tools | Michael Bazzell's hosted search tools for people, social, images, geo
Google Hacking Database | Exploit-DB's curated Google dorks 数据库 for recon
github-dorks | CLI 工具 to scan GitHub repos/orgs for sensiti leaks
metagoofil | Extracts metadata from public documents (PDF, DOC, XLS) belonging to a target
Sherlock | Hunt usernames across 400+ social networks
Maigret | Sherlock-style username enumeration across 3000+ sites with profile-data extraction
Holehe | Check if an email is used on 120+ sites flows
GHunt | OSINT toolkit for in Google accounts (Gmail, Dri exposure)
Blackbird | Fast username and email OSINT search across 600+ services
h8mail | Email OSINT and breach-credential hunting (HIBP, Snusbase, Leak-Lookup integrations)
PhoneInfoga | Ad OSINT 框架 for scanning international phone numbers
Photon | Fast web crawler that extracts URLs, emails, secrets, and intel for recon
Amass | OWASP project for in-depth attack-surface mapping and external asset discovery
Subfinder | Fast passi enumeration using public sources
cloud_enum | Enumerate public resources in AWS, Azure, and GCP for a target keyword
reconFTW | End-to-end recon automation chaining 50+ tools for subdomains, vulns, and OSINT
IntelOwl | OSINT solution that aggregates 100+ analyzers (threat intel, malware, obser)
OSINT Framework | Web-based directory of OSINT resources organised by data type
Bellingcat Online In Toolkit | Bellingcat's curated, regularly updated toolkit and how-to guides
Have I Been Pwned | Check whether emails/usernames appear in known data breaches
Hunter.io | Find and professional email addresses tied to a domain
Carbon14 | OSINT 工具 for estimating the age of web pages from HTTP metadata

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🦠 Malware Analysis

Name | Description
---- | ----
Malware traffic analysis | list of traffic analysis exercises
Malware Analysis - CSCI 4976 | another class from the folks at RPISEC, quality content

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🤖 AI Security / AI Red Teaming

#### Learning the Skills
Name | Description
---- | ----
HTB AI Red Teamer Path | Hack The Box's offensive AI job-role path (built with Google). Modules on prompt injection, model privacy attacks, ad AI, supply chain, deployment threats. Hands-on labs against real systems.

#### Offensi & Knowledge Bases
Name | Description
---- | ----
OWASP Top 10 for LLM Applications | Canonical attack-class taxonomy: prompt injection, sensitive info disclosure, supply chain, model poisoning, excessi, system prompt leakage, and more.
OWASP ML Security Top 10 | Sibling project focused on attacks against ML pipelines.
MITRE ATLAS | Ad threat matrix for AI systems (16 tactics, 84 techniques, real-world case studies). The ATT&CK for AI.

#### Tools (Offensive)
Name | Description
---- | ----
Garak | Most mature open-源码 LLM scanner. Probes for prompt injection, jailbreaks, data leakage, hallucination, toxicity.
PyRIT | Microsoft's Python Risk Identification 工具 for generative AI; supports multi-turn attack orchestration.
Promptfoo | LLM red-team + e with 100+ attack types.
DeepTeam | Red-team 框架 mapped to OWASP LLM Top 10; 50+ , 20+ ad methods.
LLMFuzzer | Fuzzing 框架 specifically for LLM integrations.
promptmap | Prompt-injection scanner.
Ad Robustness Toolbox (ART) | Linux Foundation library co e, poisoning, extraction, and inference attacks across all major ML frameworks.
Cle | Classic library for crafting ad examples against image models.
AI Exploits (Protect AI) | Collection of real, working exploits for found in AI/ML tools and platforms.

#### Sharpening Your Skills
Name | Description
---- | ----
Gandalf (Lakera) | 7-le challenge; the "O" of LLM hacking.
HackAPrompt | Competiti CTF; dataset of 600k+ real jailbreak submissions.
Dreadnode Crucible | Free open AI red-team CTF platform with challenges across many difficulties and domains.
0DIN (Mozilla) | Gamified AI CTF training community on prompt injection and jailbreaking against interactive AI characters.
huntr | Bug bounty platform with an active AI/ML category targeting real models and CVEs.

#### Reading & Research
Name | Description
---- | ----
Embrace The Red | Johann Rehberger's blog; deep, practical write-ups of real-world LLM and agent exploitation.
Simon Willison — prompt injection | Running commentary from the person who coined the term; tracks every no.
0DIN Blog | Disclosures and write-ups of real AI from Mozilla's bug-bounty program.
Indirect Prompt Injection (Greshake et al.) | Canonical research repo for indirect prompt injection.
HackerOne x HTB AI Red Team CTF debrief | Lessons from 200+ players in a live LLM jailbreak CTF, mapped to OWASP LLM Top 10.

#### Awesome Lists
Name | Description
---- | ----
corca-ai/awesome-llm-security | Most-starred LLM security awesome list.
PromptLabs/Prompt-Hacking-Resources | Focused specifically on red teaming, jailbreaks, prompt injection.
jiep/offensi | Offense-oriented curation: AI-powered attacks, plus attacks against AI.

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🛰️ Network Scanning / Reconnaissance

Name | Description
---- | ----
Foot Printing with WhoIS/DNS records | a white paper from SANS
Google Dorks/Google Hacking | list of commands for google hacks, unleash the power of the world's biggest search 引擎

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🌐 Web Application

Name | Description
---- | ----
bWAPP | common buggy web app for hacking, great for beginners, lots of documentation
Damn Small Web | written in less than 100 lines of 代码, this web app has tons of vulns, great for teaching
Damn Web Application (DVWA) | PHP/MySQL web app for testing skills and tools
Google Gruyere | host of challenges on this cheesy web app
OWASP Broken Web Applications Project | hosts a collection of broken web apps
OWASP Hackademic Challenges project | web hacking challenges
OWASP Mutillidae II | another OWASP app, lots of documentation.
OWASP Juice Shop | covers the OWASP top 10 vulns
WebGoat: A deliberately insecure Web Application | maintained by OWASP and designed to to teach web app security

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🖥️ OS

Name | Description
---- | ----
General Test En Guidance | white paper from the pros at rapid7
Metasploitable2 (Linux) | OS, great for practicing hacking
Metasploitable3 \[Installation\] | the third installation of this OS
| collection of tons of different OS and challenges

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🐧 Linux Penetration Testing OS

Name | Description
---- | -----
BackBox | open 源码 community project, promoting security in IT eni
BlackArch | Arch Linux based pentesting distro, compatible with Arch installs
Bugtraq | ad GNU Linux pen-testing technology
Docker for pentest | Image with the more used tools to create a pentest en easily and quickly.
Kali | the infamous pentesting distro from the folks at Offensi
LionSec Linux | pentesting OS based on Ubuntu
Parrot | Debian includes full portable lab for security, DFIR, and de
Pentoo | pentesting OS based on Gentoo

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

💥 Exploits

Name | Description
---- | ----
0day.today | Easy to na database of exploits
Exploit Database | database of a wide exploits, C archive
CXsecurity | Indie cybersecurity info managed by 1 person
Snyk DB | detailed info and remediation guidance for known vulns, also allows you to test your 代码

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

💬 Forums

Name | Description
---- | ----
0x00sec | hacker, malware, computer engineering, Reverse engineering
CODEBY.NET | hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum
Greysec | hacking and security forum
Hackforums | posting webstite for hacks/exploits/ discussion

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

🎬 Archi Conference

Name | Description
---- | ----
InfoCon.org | hosts data from hundreds of cons
Irongeek | Website of Adrien Crenshaw, hosts a ton of info.
infocondb.org | a site that aims to catalog and cross-reference all hacker conferences.

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

👥 Online Communities

Name | Description
---- | -----
Hacktoday | requires an account, co all kinds of hacking topics
Hack+ | link requires
MPGH | community of MultiPlayerGameHacking

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

📰 Online News Sources

Name | Description
---- | ----
InfoSec | covers all the latest infosec topics
Hashes.com Hash Lookup | great place to lookup hashes against known cracked/leaked sets
Security Intell | covers all kinds of news, great intelligence resources
Threatpost | covers all the latest threats and breaches
Secjuice
The Hacker News | features a daily stream of hack news, also has an app
Infostealers by Hudson Rock | all-around hub with news and publications about Infostealers

<p align="right">(<a href="#table-of-contents">back to top</a>)</p>

---

Contributors

Thanks to e who has contributed resources, fixes, and reviews.

<a href="
<img src=" alt="Contributors" />
</a>

Star History

![Star History Chart]()

License

Released under GPL-3.0.

项目信息

开发语言：未知

Star 数：17472

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collection of hacking / penetration testing resources to make you better!展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。