Hacking Open Source Projects

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

ALL IN ONE Hacking Tool For Hackers

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

A collection of hacking / penetration testing resources to make you better!

A curated list of awesome Hacking tutorials, tools and resources

A collection of hacking tools, resources and references to practice ethical hacking.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Useful tool to track location or mobile number

Web path scanner

Source code for Hacker101.com - a free online web and mobile security class.

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Fast passive subdomain enumeration tool.

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Damn Vulnerable Web Application (DVWA)

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat

fsociety Hacking Tools Pack – A Penetration Testing Framework

A list of resources for those interested in getting started in bug bounties

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

🎬 A curated list of movies every hacker & cyberpunk must watch.

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

The recursive internet scanner for hackers. 🧡

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Tools and Techniques for Red Team / Penetration Testing

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

A collection of several hundred online tools for OSINT

Gather and update all available and newest CVEs with their PoC.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

This is a multi-use bash script for Linux systems to audit wireless networks.

Cyber Security ALL-IN-ONE Platform

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

A list of web application security

Gathering all info published, both by Apple and by others, about new framework SwiftUI.

Automated Adversary Emulation Platform

The all-in-one browser extension for offensive security professionals 🛠

All about bug bounty (bypasses, payloads, and etc)

Next generation web scanner

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A Modern Orchestration Engine for Security

Top 100 Hacking & Security E-Books (Free Download)

The project source code for Hacking with iOS.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Open Source Javascript Gantt

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

An automated e-mail OSINT tool