Star History

📰 Online News Sources

• ![Star History Chart - history.com/#vitalysim/Awesome-Hacking-Resources&Date)
• ![Star History Chart - history.com/#vitalysim/Awesome-Hacking-Resources&Date)

Table of Contents

🤖 AI Security / AI Red Teaming

• HTB AI Red Teamer Path - role path (built with Google). Modules on prompt injection, model privacy attacks, adversarial AI, supply chain, deployment threats. Hands-on labs against real systems.
• OWASP Top 10 for LLM Applications - class taxonomy: prompt injection, sensitive info disclosure, supply chain, model poisoning, excessive agency, system prompt leakage, and more.
• OWASP ML Security Top 10
• MITRE ATLAS - world case studies). The ATT&CK for AI.
• Garak - source LLM vulnerability scanner. Probes for prompt injection, jailbreaks, data leakage, hallucination, toxicity.
• PyRIT - turn attack orchestration.
• Promptfoo - team + eval framework with 100+ attack types.
• DeepTeam - team framework mapped to OWASP LLM Top 10; 50+ vulnerabilities, 20+ adversarial methods.
• LLMFuzzer
• promptmap - injection vulnerability scanner.
• Adversarial Robustness Toolbox (ART)
• CleverHans
• AI Exploits (Protect AI)
• Gandalf (Lakera) - level prompt-injection challenge; the "OverTheWire" of LLM hacking.
• HackAPrompt - injection CTF; dataset of 600k+ real jailbreak submissions.
• 0DIN (Mozilla)
• huntr
• Embrace The Red - ups of real-world LLM and agent exploitation.
• Simon Willison — prompt injection
• 0DIN Blog - ups of real AI vulnerabilities from Mozilla's bug-bounty program.
• Indirect Prompt Injection (Greshake et al.)
• HackerOne x HTB AI Red Team CTF debrief
• corca-ai/awesome-llm-security - starred LLM security awesome list.
• PromptLabs/Prompt-Hacking-Resources
• jiep/offensive-ai-compilation - oriented curation: AI-powered attacks, plus attacks against AI.

Archived Security Conference Videos

• InfoCon.org
• infocondb.org - reference all hacker conferences.

Exploits

• 0day.today
• Exploit Database
• CXsecurity
• Snyk Vulnerability DB

Forums

• 0x00sec
• CODEBY.NET - russian based forum
• EAST Exploit database
• Greysec
• Hackforums
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• 4Hat Day
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• Antichat
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database
• EAST Exploit database

📚 Learning the Skills

• Hopper's Roppers Security Training - paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
• Hak5 - style videos covering various topics, has a forum, "metasploit-minute" video series could be useful

Learning the Skills

• CS 642: Intro to Computer Security
• Cybrary - contributed content, account required, content can be filtered by experience level
• Free Cyber Security Training
• Learning Exploitation with Offensive Computer Security 2.0 - style instruction, includes: slides, videos, homework, discussion. No login required.
• Mind Maps
• SecurityTube - styled content, "megaprimer" videos covering various topics, no readable content on site.
• Seed Labs
• TryHackMe
• Hopper's Roppers Security Training - paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
• CyberSec WTF - ups
• OffensiveComputerSecurity
• CS 642: Intro to Computer Security
• Learning Exploitation with Offensive Computer Security 2.0 - style instruction, includes: slides, videos, homework, discussion. No login required.

🐧 Linux Penetration Testing OS

• Bugtraq - testing technology

Linux Penetration Testing OS

• Android Tamer
• BackBox
• BlackArch
• Bugtraq - testing technology
• LionSec Linux
• Parrot
• Pentoo
• Bugtraq - testing technology
• Docker for pentest
• BackBox

Malware Analysis

• Malware Analysis - CSCI 4976

Network Scanning / Reconnaissance

• Google Dorks/Google Hacking
• Foot Printing with WhoIS/DNS records

Online Communities

• Hacktoday
• Hack+
• MPGH
• MPGH

📰 Online News Sources

• Hashes.com Hash Lookup
• Infostealers by Hudson Rock - around hub with news and publications about Infostealers

Online News Sources

• InfoSec
• Recent Hash Leaks
• Security Intell
• Threatpost
• The Hacker News

🕵️ OSINT

• theHarvester - mail, subdomain, host and people-name harvester using public sources
• Maltego CE - based link-analysis platform for OSINT and forensics; Community Edition is free
• Recon-ng - featured web reconnaissance framework written in Python
• SpiderFoot
• Intel Techniques Tools
• Google Hacking Database - DB's curated Google dorks database for recon
• github-dorks
• metagoofil
• Sherlock
• Maigret - style username enumeration across 3000+ sites with profile-data extraction
• Holehe - reset flows
• GHunt
• Blackbird
• h8mail - credential hunting (HIBP, Snusbase, Leak-Lookup integrations)
• PhoneInfoga
• Photon
• Amass - depth attack-surface mapping and external asset discovery
• Subfinder
• cloud_enum
• reconFTW - to-end recon automation chaining 50+ tools for subdomains, vulns, and OSINT
• IntelOwl
• OSINT Framework - based directory of OSINT resources organised by data type
• Have I Been Pwned
• Hunter.io
• Carbon14

⬆️ Privilege Escalation

• Windows Local Privilege Escalation (HackTricks) - to-date checklist of Windows privilege escalation vectors
• Linux Privilege Escalation (HackTricks)
• Windows Privilege Escalation

Privilege Escalation

• A GUIDE TO LINUX PRIVILEGE ESCALATION
• Abusing SUDO (Linux Privilege Escalation)
• Basic linux privilege escalation
• Common Windows Privilege Escalation Vectors
• Editing /etc/passwd File for Privilege Escalation
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Using PATH Variable
• Linux Privilege Escalation using Misconfigured NFS
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• Local Linux Enumeration & Privilege Escalation Cheatsheet
• Privilege escalation linux with live example
• Reach the root
• Unix privesc checker
• Windows Privilege Escalation
• Windows Privilege Escalation
• Windows privilege escalation checker
• Windows Privilege Escalation Guide
• Windows Privilege Escalation Methods for Pentesters
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• A GUIDE TO LINUX PRIVILEGE ESCALATION
• A GUIDE TO LINUX PRIVILEGE ESCALATION
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation via Dynamically Linked Shared Object Library
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Scripts
• Linux Privilege Escalation Scripts
• Editing /etc/passwd File for Privilege Escalation
• Linux Privilege Escalation Using PATH Variable
• Linux Privilege Escalation using Misconfigured NFS
• A GUIDE TO LINUX PRIVILEGE ESCALATION
• AutoLocalPrivilegeEscalation
• Linux Privilege Escalation Check Script
• Linux Privilege Escalation Scripts
• Privilege escalation linux with live example
• RootHelper
• Windows exploits, mostly precompiled.
• Abusing SUDO (Linux Privilege Escalation)

🧬 Reverse Engineering, Buffer Overflow and Exploit Development

• Reverse Engineering for Beginners (book site)
• Shell storm
• Reverse Engineering for Beginners - source

Reverse Engineering, Buffer Overflow and Exploit Development

• Analysis and exploitation (unprivileged)
• Binary hacking
• Corelan tutorials
• Exploit tutorials
• flAWS challenge
• Introduction to ARM Assembly Basics
• Introductory Intel x86
• Linux (x86) Exploit Development Series