122.9K ·GitHub
What is this?
A massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.
Is this a list of tools, or a list of lists?
It is a meta-list: a two-column table of repository name and description, where each entry points to its own separate awesome-list repository (plus a second table of other useful standalone security repos).
How is it organized and how do I find what I need?
Two big tables: 'Awesome Repositories' links to dozens of topic-specific awesome-lists (Android Security, Bug Bounty, CTF, OSINT, Web Hacking, etc.), and 'Other Useful Repositories' links to standalone tools and references like PayloadsAllTheThings, GTFOBins, and CyberChef.
Do I need anything to use this list?
No, it's just a README with links — you click through to whichever sub-list or tool interests you.
Are these sub-lists maintained and curated, or just dumped here?
The repo itself doesn't vet quality of the linked lists; it's a curation of curations, so freshness and quality vary by whichever external repo you follow.
Where should a beginner start?
The 'Hacking' and 'Pentest' entries give general tutorials and tools, while 'Infosec Getting Started' and 'Cyber Security University' are explicitly aimed at people new to the field.
Are there sections for niche topics like cars or drones?
Yes, it links out to specialized lists for Vehicle Security, Drone Hacking, Industrial Control Systems, Mainframe Hacking, and Cellular (3G/4G/5G) Hacking, among others.
Is there anything here about AI/LLM security?
Yes, there are entries for 'AI Security', 'Prompt Injection' (attacks targeting AI/LLM systems), and 'Reinforcement Learning for Cyber Security'.
What are similar projects?
hacker-roadmap, Claude-Red, awesome-malware-analysis, awesome-web-security, Offensive-Security-AI-Models, PENTESTING-BIBLE, Anthropic-Cybersecurity-Skills, exploitarium
Which topics is it in?
bug-bounty, threat-intelligence, fuzzing, malware-analysis, ctf, infosec, osint, red-team, pentesting, penetration-testing, hacking, reverse-engineering
