This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

training ai exploit hackers hacking artificial-intelligence cybersecurity penetration-testing exploits vulnerability awesome-list hacker vulnerability-management vulnerability-identification vulnerability-assessment ethical-hacking awesome-lists exploit-development ai-security hacking-series

• Updated Nov 7, 2026
• Jupyter Notebook

A collection of hacking / penetration testing resources to make you better!

exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux

• Updated May 21, 2026

CTF framework and exploit development library

python linux exploit assembly python3 bsd ctf defcon pwntools ctf-framework shellcode rop pwnable capture-the-flag wargame python2 hacktoberfest shellcoding shellcode-development

• Updated Nov 8, 2026
• Python

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

dns search-engine security awesome osint exploit hacking awesome-list wifi-network vulnerabilities bugbounty cve security-tools threat-intelligence awesome-lists redteaming redteam hacking-tools osint-tool

• Updated Nov 12, 2026
• Shell

List of free GPTs that doesn't require plus subscription

spam google awesome ai bots hack exploit jailbreak chatbot agi gemini openai awesome-list artifacts gpt agents prompts claude chatgpt anthropic

• Updated Mar 18, 2026

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

java serialization exploit jvm deserialization gadget poc vulnerability javadeser

• Updated Dec 4, 2025
• Java

windows-kernel-exploits Windows平台提权漏洞集合

windows kernel exploit tool collections pentest

• Updated Jun 11, 2021
• C

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

python linux debugging exploit mips discord reverse-engineering gdb pwn ctf python-api gef ida-pro binary-ninja pwntools malware-analysis sparc powerpc exploit-development

• Updated Nov 12, 2026
• Python

Gather and update all available and newest CVEs with their PoC.

security exploit hacking penetration-testing poc vulnerability infosec pentesting vulnerabilities cve software-security red-team security-tools software-vulnerability software-vulnerabilities latest-cve cve-poc

• Updated Nov 10, 2026
• HTML

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

security exploit poc vulnerability cve

• Updated Nov 12, 2026

Cyber Security ALL-IN-ONE Platform

golang security exploit scanner hacking pentest burpsuite blueteam redteam hacking-tools redteam-tools

• Updated Nov 12, 2026
• TypeScript

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

exploit penetration-testing poc rce csrf cve bypass thinkphp cobalt-strike authentication-bypass getshell penetration-testing-poc csrf-webshell sql-poc poc-exp oa-getshell cve-cms php-bypass sql-getshell

• Updated Nov 12, 2026
• HTML

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

exploit infosec privilege-escalation security-tools privesc hackthebox gtfobins redteam-tools cve-2021-3560 cve-2022-0847 dirtypipe

• Updated Mar 12, 2024
• Go

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

exploit cheatsheet cybersecurity infosec pentesting bugbounty pentest offensive-security soc blueteam default-password blueteaming blueteam-tools offensive-security-projects

• Updated Sep 27, 2026
• Python

A collection of links related to Linux kernel security and exploitation

security exploit linux-kernel kernel-exploitation privilege-escalation

• Updated Nov 5, 2026

An all-in-one hacking tool to remotely take over Android devices.

android python hack adb exploit hacking cybersecurity penetration-testing pentesting android-debug-bridge metasploit-framework collaborate hacktoberfest hacking-tool meterpreter pentest-tool hacking-script android-hacking phonesploit phonesploit-pro

• Updated Oct 19, 2026
• Python

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database exploit scanner hacking password poc rce brute-force pentest bypass crack privilege-escalation exp lpe 0day getshell netscan

• Updated Jan 25, 2025
• PowerShell

linux-kernel-exploits Linux平台提权漏洞集合

linux awesome collection kernel exploit tool pentest

• Updated Jul 13, 2020
• C

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

• Updated Mar 24, 2025
• C#

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

android python java interpreter backdoor reverse-shell exploit sockets apk android-application rat hacktoberfest android-rat androrat interpreter-commands

• Updated Jul 17, 2024
• Java