Global

> At least one of the supported USB adapters is required.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

claude-red is a curated library of offensive security skills designed for the Claude skills system. md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

🐬 A collection of awesome resources for the Flipper Zero device.

For a list of free hacking books available for download, go here

A list of resources for those interested in getting started in bug bounties

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

This is a webshell open source project

iOS customization toolbox using the badquery sandbox escape. 0db1-db4.

Pre-auth RCE on Microsoft Exchange Server. No credentials needed.

This is a bunch of pentesting utilities on top of that. swbn that Chrome installs, and speaks SMB / LDAP / DCE-RPC / WinRM / Kerberos / MSSQL / ADWS from a browser tab.