A curated collection of open-source resources designed to help beginners and intermediate learners master cybersecurity concepts. These repositories cover penetration testing, vulnerability assessment, and hands-on labs, providing practical tools and educational materials for aspiring ethical hackers.
Get targeted exposure with custom position pinning and highlighted placement.
A comprehensive guide by Jason Haddix that walks through hacking techniques used in the HackTheBox platform. It includes detailed write-ups, scripts, and explanations of various attack vectors, making it an excellent resource for practical learning.
A curated list of ethical hacking labs and challenges available online, ranging from beginner to advanced levels. It provides direct links to platforms like HackTheBox, TryHackMe, and OverTheWire for hands-on practice in a safe environment.
An actively maintained database of Common Vulnerabilities and Exposures (CVEs) extracted from various sources. It is designed to help security researchers and ethical hackers quickly identify and analyze known vulnerabilities in software and systems.
A highly curated list of awesome sysadmin tools, resources, and guides. While focused on system administration, it includes essential security monitoring, hardening, and forensic tools critical for understanding the infrastructure an ethical hacker targets.
A fast and customizable vulnerability scanner powered by simple YAML-based DSL. It allows ethical hackers to automate the detection of common security issues across various services, offering thousands of pre-built templates for immediate use.
Although focused on Git, this repository provides critical workflows for managing code changes and rollbacks. Understanding version control is essential for ethical hackers who need to track changes in source code or manage their own penetration testing tools.
Open Source Security Information Management (OSSIM) is a powerful SIEM solution that correlates events from various sources. It helps learners understand how to monitor network traffic, detect intrusions, and analyze security logs effectively.
A web application attack and audit framework that identifies vulnerabilities in web apps. It is widely used by ethical hackers to find security issues like SQL injection, cross-site scripting, and other web-based threats during penetration tests.
A collection of resources specifically designed for developers to understand web security. It covers common vulnerabilities and their mitigation strategies, making it ideal for ethical hackers who need to explain risks to development teams.
A curated list of penetration testing tools and resources for security professionals. It organizes tools by category, such as reconnaissance, vulnerability assessment, and exploitation, providing a quick reference for building a pentester's toolkit.
A repository dedicated to automating various aspects of penetration testing. It includes scripts and tools that streamline tasks like network scanning, service enumeration, and vulnerability detection, saving time during security assessments.
A community-driven resource containing a vast array of cybersecurity tools, articles, and tutorials. It serves as a central hub for discovering new tools and learning about emerging threats, making it valuable for staying updated in the field.
A collection of resources and scripts related to Metasploit Meterpreter sessions. It helps learners understand post-exploitation techniques, privilege escalation, and lateral movement within compromised systems during ethical hacking engagements.
A repository of Proof of Concept scripts for Nmap, the renowned network scanning tool. It extends Nmap's capabilities by providing custom scripts to detect specific vulnerabilities and services, enhancing the reconnaissance phase of pentesting.
A Windows privilege escalation checker that automates the process of finding misconfigurations. It helps ethical hackers identify paths to gain higher privileges on compromised Windows systems, a critical step in penetration testing.
A Linux enumeration script that automates the collection of information about a target system. It helps ethical hackers quickly identify potential vulnerabilities and misconfigurations on Linux-based machines during penetration tests.
A curated collection of security-related lists, including wordlists for password cracking and fuzzing. Maintained by Daniel Miessler, this repository is essential for any ethical hacker needing robust input data for various security testing tools.
A comprehensive list of hacking resources, books, courses, and tools. It covers a wide range of topics from basic hacking concepts to advanced exploit development, serving as a one-stop guide for beginners and experienced practitioners alike.
A curated list of security resources focusing on defensive security and threat intelligence. It helps ethical hackers understand the attacker's mindset by providing insights into threat actors, attack patterns, and defense strategies.
A collection of resources for incident response and digital forensics. It helps ethical hackers and security analysts learn how to detect, respond to, and recover from security breaches, closing the loop on the security lifecycle.