awesome-hacking

Hacking resource catalog

A curated list of resources for learning hacking and penetration testing

A curated list of awesome Hacking tutorials, tools and resources

GitHub

13k stars
613 watching
2k forks
last commit: over 2 years ago
Linked from 17 awesome lists

awesomehacking

System / Tutorials

Roppers Computing Fundamentals

System / Tutorials / Roppers Computing Fundamentals

gitbookFree, self-paced curriculum that builds a base of knowledge in computers and networking. Intended to build up a student with no prior technical knowledge to be confident in their ability to learn anything and continue their security education. Full text available as a

System / Tutorials

Corelan Team's Exploit writing tutorial
Exploit Writing Tutorials for Pentesters
Understanding the basics of Linux Binary Exploitation1,305over 5 years ago
Shells
Missing Semester

System / Tools

Metasploit34,393almost 2 years agoA computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development
mimikatz19,580about 2 years agoA little tool to play with Windows security
Hackers toolsTutorial on tools

System / Tools / Docker Images for Penetration Testing & Security

official Kali Linux
official OWASP ZAP12,847almost 2 years ago-
official WPScan-
Official Metasploit-
Damn Vulnerable Web Application (DVWA)-
Vulnerable WordPress Installation-
Vulnerability as a service: Shellshock-
Vulnerability as a service: Heartbleed-
Security Ninjas-
Arch Linux Penetration Tester-
Docker Bench for Security-
OWASP Security Shepherd-
OWASP WebGoat Project docker image-
OWASP NodeGoat1,895over 2 years ago-
OWASP Mutillidae II Web Pen-Test Practice Application-
OWASP Juice Shop10,585almost 2 years ago-
Docker Metasploit-

System / General

Exploit databaseAn ultimate archive of exploits and vulnerable software

Reverse Engineering / Tutorials

Begin RE: A Reverse Engineering Tutorial Workshop
Malware Analysis Tutorials: a Reverse Engineering Approach
Malware Unicorn Reverse Engineering Tutorial
Lena151: Reversing With Lena

Reverse Engineering / Tools / Disassemblers and debuggers

IDAIDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger
OllyDbgA 32-bit assembler level analysing debugger for Windows
x64dbg45,012almost 2 years agoAn open-source x64/x32 debugger for Windows
radare220,862almost 2 years agoA portable reversing framework
plasma3,050about 5 years agoInteractive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code
ScratchABit397almost 6 years agoEasily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
Capstone7,674almost 2 years ago
GhidraA software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission

Reverse Engineering / Tools / Decompilers

Luyten5,016about 2 years agoone of the best, though a bit slow, hangs on some binaries and not very well maintained
dotPeeka free-of-charge .NET decompiler from JetBrains
ILSpy21,832almost 2 years agoan open-source .NET assembly browser and decompiler
dnSpy26,802over 5 years ago.NET assembly editor, decompiler, and debugger
HopperA OS X and Linux Disassembler/Decompiler for 32/64-bit Windows/Mac/Linux/iOS executables
cuttera decompiler based on radare2
retdec8,060almost 2 years ago
snowman2,261over 3 years ago
Hex-Rays
uncompyle63,836almost 2 years agodecompiler for the over 20 releases and 20 years of CPython

Reverse Engineering / Tools / Deobfuscators

de4dot7,002about 6 years ago.NET deobfuscator and unpacker
JS Beautifier8,654almost 2 years ago
JS Nicea web service guessing JS variables names and types based on the model derived from open source

Reverse Engineering / Tools / Other

nudge4j162over 6 years agoJava tool to let the browser talk to the JVM
dex2jar12,403about 2 years agoTools to work with Android .dex and Java .class files
androguardReverse engineering, malware and goodware analysis of Android applications
antinet299over 12 years ago.NET anti-managed debugger and anti-profiler code
UPXthe Ultimate Packer (and unpacker) for eXecutables

Reverse Engineering / Tools / Execution logging and tracing

WiresharkA free and open-source packet analyzer
tcpdumpA powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture
mitmproxy37,148almost 2 years agoAn interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface
Charles ProxyA cross-platform GUI web debugging proxy to view intercepted HTTP and HTTPS/SSL live traffic
usbmonUSB capture for Linux
USBPcap932almost 3 years agoUSB capture for Windows
dynStruct319about 7 years agostructures recovery via dynamic instrumentation
drltrace392about 6 years agoshared library calls tracing

Reverse Engineering / Tools / Binary files examination and editing

HxDA hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size
WinHexA hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security
wxHexEditor568about 2 years ago
Synalize It/ -
Binwalk11,530almost 2 years agoDetects signatures, unpacks archives, visualizes entropy
Veles1,158over 7 years agoa visualizer for statistical properties of blobs
Kaitai Struct4,045almost 2 years agoa DSL for creating parsers in a variety of programming languages. The Web IDE is particularly useful for reverse-engineering
Protobuf inspector972almost 6 years ago
DarunGrim359about 6 years agoexecutable differ
DBeaver40,942over 1 year agoa DB editor
Dependencies9,288over 2 years agoa FOSS replacement to Dependency Walker
PEviewA quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files
BinTextA small, very fast and powerful text extractor that will be of particular interest to programmers

Reverse Engineering / General

Open Malware

Web / Tools

SpyseData gathering service that collects web info using OSINT. Provided info: IPv4 hosts, domains/whois, ports/banners/protocols, technologies, OS, AS, maintains huge SSL/TLS DB, and more... All the data is stored in its own database allowing get the data without scanning
sqlmap32,841almost 2 years agoAutomatic SQL injection and database takeover tool
NoSQLMap2,958about 2 years agoAutomated NoSQL database enumeration and web application exploitation tool
tools.web-max.cabase64 base85 md4,5 hash, sha1 hash encoding/decoding
VHostScan1,208almost 3 years agoA virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages
SubFinder10,428almost 2 years agoSubFinder is a subdomain discovery tool that discovers valid subdomains for any target using passive online sources
FindsubdomainsA subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results
badtouch402over 2 years agoScriptable network authentication cracker
PhpSploit2,237over 2 years agoFull-featured C2 framework which silently persists on webserver via evil PHP oneliner
Git-Scanner341about 6 years agoA tool for bug hunting or pentesting for targeting websites that have open repositories available in public
CSP ScannerAnalyze a site's Content-Security-Policy (CSP) to find bypasses and missing directives
ShodanA web-crawling search engine that lets users search for various types of servers connected to the internet
masscan23,823almost 2 years agoInternet scale portscanner
Keyscope387over 2 years agoan extensible key and secret validation tool for auditing active secrets against multiple SaaS vendors
Decompiler.comJava, Android, Python, C# online decompiler

Web / General

Strong node.js502over 2 years agoAn exhaustive checklist to assist in the source code security analysis of a node.js web service

Network / Tools

NetworkMinerA Network Forensic Analysis Tool (NFAT)
ParosA Java-based HTTP/HTTPS proxy for assessing web application vulnerability
pig462almost 6 years agoA Linux packet crafting tool
findsubdomainsreally fast subdomains scanning service that has much greater opportunities than simple subs finder(works using OSINT)
cirt-fuzzerA simple TCP/UDP protocol fuzzer
ASlookupa useful tool for exploring autonomous systems and all related info (CIDR, ASN, Org...)
ZAPThe Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications
mitmsocks4j35over 13 years agoMan-in-the-middle SOCKS Proxy for Java
ssh-mitm1,636about 5 years agoAn SSH/SFTP man-in-the-middle tool that logs interactive sessions and passwords
nmapNmap (Network Mapper) is a security scanner
Aircrack-ngAn 802.11 WEP and WPA-PSK keys cracking program
Nipe1,970almost 2 years agoA script to make Tor Network your default gateway
Habu891almost 3 years agoPython Network Hacking Toolkit
Wifi JammerFree program to jam all wifi clients in range
FiresheepFree program for HTTP session hijacking attacks
Scapy259about 2 years agoA Python tool and library for low level packet creation and manipulation
Amass12,185almost 2 years agoIn-depth subdomain enumeration tool that performs scraping, recursive brute forcing, crawling of web archives, name altering and reverse DNS sweeping
sniffglue1,148almost 2 years agoSecure multithreaded packet sniffer
Netz389over 5 years agoDiscover internet-wide misconfigurations, using zgrab2 and others
RustScan14,903almost 2 years agoExtremely fast port scanner built with Rust, designed to scan all ports in a couple of seconds and utilizes nmap to perform port enumeration in a fraction of the time
PETEP187almost 3 years agoExtensible TCP/UDP proxy with GUI for traffic analysis & modification with SSL/TLS support

Forensic / Tools

AutopsyA digital forensics platform and graphical interface to and other digital forensics tools
sleuthkit2,648almost 2 years agoA library and collection of command-line digital forensics tools
EnCaseThe shared technology within a suite of digital investigations products by Guidance Software
malzillaMalware hunting tool
IPED - Indexador e Processador de Evidências DigitaisBrazilian Federal Police Tool for Forensic Investigation
CyLR652over 4 years agoNTFS forensic image collector
CAINECAINE is a Ubuntu-based app that offers a complete forensic environment that provides a graphical interface. This tool can be integrated into existing software tools as a module. It automatically extracts a timeline from RAM

Cryptography / Tools

xortool1,402over 3 years agoA tool to analyze multi-byte XOR cipher
John the RipperA fast password cracker
AircrackAircrack is 802.11 WEP and WPA-PSK keys cracking program
Ciphey18,364over 2 years agoAutomated decryption tool using artificial intelligence & natural language processing

Wargame / System

OverTheWire - Semtex
OverTheWire - Vortex
OverTheWire - Drifter
pwnable.krProvide various pwn challenges regarding system security
Exploit Exercises - Nebula
SmashTheStack
HackingLab

Wargame / Reverse Engineering

Reversing.krThis site tests your ability to Cracking & Reverse Code Engineering
CodeEngn(Korean)
simples.kr(Korean)
Crackmes.deThe world first and largest community website for crackmes and reversemes

Wargame / Web

Hack This Site!a free, safe and legal training ground for hackers to test and expand their hacking skills
Hack The Boxa free site to perform pentesting in a variety of different systems
Webhacking.kr
0xf.ata website without logins or ads where you can solve password-riddles (so called hackits)
fuzzy.landWebsite by an Austrian group. Lots of challenges taken from CTFs they participated in
Gruyere
Others
TryHackMeHands-on cyber security training through real-world scenarios

Wargame / Cryptography

OverTheWire - Krypton

Wargame / Bug bounty

Awesome bug bounty resources by EdOverflow5,986about 3 years ago

Wargame / Bug bounty - Earn Some Money

Bugcrowd
Hackerone
IntigritiEurope's #1 ethical hacking and bug bounty program

CTF / Competition

DEF CON
CSAW CTF
hack.lu CTF
Pliad CTF
RuCTFe
Ghost in the Shellcode
PHD CTF
SECUINSIDE CTF
Codegate CTF
Boston Key Party CTF
ZeroDays CTF
Insomni’hack
Pico CTF
prompt(1) to winXSS Challenges
HackTheBox

CTF / General

Hack+An Intelligent network of bots that fetch the latest InfoSec content
CTFtime.orgAll about CTF (Capture The Flag)
WeChall
CTF archives (shell-storm)
Rookit ArsenalOS RE and rootkit development
Pentest Cheat Sheets3,917over 2 years agoCollection of cheat sheets useful for pentesting
Movies For Hackers10,668about 2 years agoA curated list of movies every hacker & cyberpunk must watch
Roppers CTF Fundamentals CourseFree course designed to get a student crushing CTFs as quickly as possible. Teaches the mentality and skills required for crypto, forensics, and more. Full text available as a

OS / Online resources

Security related Operating Systems @ RawsecComplete list of security related operating systems
Best Linux Penetration Testing Distributions @ CyberPunkDescription of main penetration testing distributions
Security @ DistrowatchWebsite dedicated to talking about, reviewing and keeping up to date with open source operating systems

Post exploitation / tools

empire7,480over 6 years agoA post exploitation framework for powershell and python
silenttrinity2,204almost 3 years agoA post exploitation tool that uses iron python to get past powershell restrictions
PowerSploit11,979about 6 years agoA PowerShell post exploitation framework
ebowla740over 7 years agoFramework for Making Environmental Keyed Payloads

ETC

SecToolsTop 125 Network Security Tools
Roppers Security FundamentalsFree course that teaches a beginner how security works in the real world. Learn security theory and execute defensive measures so that you are better prepared against threats online and in the physical world. Full text available as a
Roppers Practical NetworkingA hands-on, wildly practical introduction to networking and making packets dance. No wasted time, no memorizing, just learning the fundamentals
Rawsec's CyberSecurity InventoryAn open-source inventory of tools, resources, CTF platforms and Operating Systems about CyberSecurity. ( )
The CyberclopaediaThe open-source encyclopedia of cybersecurity

Backlinks from these awesome lists:

More related projects: