User Experience on mobile might not be great yet, but I'm working on it.

Your first time on this page? Allow me to give some explanations.

Awesome Hacking

A curated list of awesome Hacking tutorials, tools and resources

Here you can see meta information about this topic like the time we last updated this page, the original creator of the awesome list and a link to the original GitHub repository.

Last Update: Dec. 4, 2020, 6:05 a.m.

Thank you carpedm20 & contributors
View Topic on GitHub:
carpedm20/awesome-hacking

Search for resources by name or description.
Simply type in what you are looking for and the results will be filtered on the fly.

Further filter the resources on this page by type (repository/other resource), number of stars on GitHub and time of last commit in months.

Tutorials

Tools

Metasploit Framework

22.26K
10.7K
1d
n/a

A little tool to play with Windows security

11.22K
2.4K
31d
n/a

Docker Images for Penetration Testing & Security

General

Tutorials

Disassemblers and debuggers

An open-source x64/x32 debugger for windows.

35.93K
1.48K
3d
GPL-3.0

UNIX-like reverse engineering framework and command-line toolset

13.49K
2.35K
5d
LGPL-3.0

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

2.89K
302
1y 9m
GPL-3.0

Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

357
46
9d
GPL-3.0

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

4.56K
1.12K
17d
n/a

Most used Reversing software.

An assembly-level debugger for Windows

Decompilers

Java decompiler, assembler, and disassembler

1.25K
148
5m
GPL-3.0

A standalone Java Decompiler GUI

9.35K
1.78K
11m
GPL-3.0

An Open Source Java Decompiler Gui for Procyon

3.78K
815
9m
Apache-2.0

Dex to Java decompiler

24.27K
2.95K
3d
Apache-2.0

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

10.97K
2.22K
93d
n/a

.NET debugger and assembly editor

16.54K
2.58K
15d
n/a

Free and Open Source Reverse Engineering Platform powered by radare2

8.6K
689
3d
GPL-3.0

RetDec is a retargetable machine-code decompiler based on LLVM.

5.69K
675
4d
n/a

Snowman decompiler

1.83K
281
32d
n/a

A cross-version Python bytecode decompiler

1.97K
231
14d
GPL-3.0

JAD

JAD Java Decompiler (closed-source, unmaintained)

Free-of-charge standalone tool based on ReSharper's bundled decompiler. It can reliably decompile any .NET assembly into equivalent C# or IL code. It can create Visual Studio solutions based on the original binary files in a straight-forward way. [Proprietary] [Free]

A Dissassembler for MacOS and Linux. Has a Demo option for 30 minutes of productivity.

Deobfuscators

.NET deobfuscator and unpacker.

4.71K
1.4K
97d
GPL-3.0

Beautifier for javascript

7.05K
1.22K
74d
MIT

a web service guessing JS variables names and types based on the model derived from open source.

Other

Get inside your JVM

144
13
7m
MIT

Tools to work with android .dex and java .class files

8.17K
1.57K
1y 91d
Apache-2.0

.NET anti-managed debugger and anti-profiler code

232
112
6y 7m
n/a

Reverse engineering, malware and goodware analysis of Android applications

UPX

the Ultimate Packer (and unpacker) for eXecutables

Execution logging and tracing

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

20.78K
2.67K
5d
MIT

USB packet capture for Windows

515
131
6m
n/a

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

270
38
1y 115d
MIT

Drltrace is a library calls tracer for Windows and Linux applications.

271
54
119d
BSD-3-Clause

A network protocol analyzer. ![Open-Source Software][oss icon] ![Freeware][freeware icon]

Packet analyzer for network traffic capture.

A cross-platform GUI web debugging proxy to view intercepted HTTP and HTTPS/SSL live traffic

Hex editors

wxHexEditor official GIT repo

372
78
6m
GPL-2.0

HxD

A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size

A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security

Hexinator](https://hexinator.com/) -

Other

Firmware Analysis Tool

6.84K
1.04K
9d
MIT

Binary data analysis and visualization tool

743
76
2y 6m
Apache-2.0

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Perl / PHP / Python / Ruby

2.2K
120
28d
n/a

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

466
60
12d
ISC

A patch analysis tool

349
72
104d
n/a

Free universal database tool and SQL client

16.85K
1.52K
2d
Apache-2.0

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

3K
273
115d
MIT

A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files

A small, very fast and powerful text extractor that will be of particular interest to programmers.

General

Tools

Automatic SQL injection and database takeover tool

18.79K
4.07K
2d
n/a

Automated NoSQL database enumeration and web application exploitation tool.

1.57K
435
7m
GPL-3.0

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

716
189
94d
GPL-3.0

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

3.1K
452
10d
MIT

Scriptable network authentication cracker

241
19
1y 26d
GPL-3.0

Full-featured C2 framework which silently persists on webserver via evil PHP oneliner

981
302
94d
GPL-3.0

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

119
34
5m
MIT

Spyse is an OSINT search engine that provides fresh data about the entire web. All the data is stored in its own DB for instant access and interconnected with each other for flexible search.

base64 base85 md4,5 hash, sha1 hash encoding/decoding

A subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results.

General

More than 100 security checks for your Node.js API

378
25
76d
n/a

Tools

A Linux packet crafting tool.

378
36
32d
GPL-2.0

Man in the Middle SOCKS Proxy for JAVA

26
10
7y 9m
n/a

SSH man-in-the-middle tool

1.29K
188
1y 79d
n/a

An engine to make Tor network your default gateway

944
216
27d
n/a

Hacking Toolkit

594
138
3d
BSD-3-Clause

Great packages that use Scapy

25
9
4d
CC-BY-4.0

In-depth Attack Surface Mapping and Asset Discovery

4.4K
786
61d
Apache-2.0

Secure multithreaded packet sniffer

625
49
54d
GPL-3.0

A Java-based HTTP/HTTPS proxy for assessing web application vulnerability

really fast subdomains scanning service that has much greater opportunities than simple subs finder(works using OSINT).

A simple TCP/UDP protocol fuzzer.

a useful tool for exploring autonomous systems and all related info (CIDR, ASN, Org...)

ZAP

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

An open source utility for network discovery and security auditing.

Crack 802.11 WEP and WPA-PSK keys.

Free program to jam all wifi clients in range

Free program for HTTP session hijacking attacks.

Tools

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

1.71K
505
3d
n/a

A digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics tools

The shared technology within a suite of digital investigations products by Guidance Software

Tools

A tool to analyze multi-byte xor cipher

951
142
63d
n/a

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

4.62K
244
65d
MIT

Crack 802.11 WEP and WPA-PSK keys.

System

Reverse Engineering

This site tests your ability to Cracking & Reverse Code Engineering

The world first and largest community website for crackmes and reversemes.

Web

Training ground for hackers.

Weekly CTFs for all types of security enthusiasts.

a website without logins or ads where you can solve password-riddles (so called hackits).

Website by an Austrian group. Lots of challenges taken from CTFs they participated in.

Cryptography

Bug bounty

A list of interesting payloads, tips and tricks for bug bounty hunters.

2.89K
979
54d
CC-BY-SA-4.0

Bug bounty - Earn Some Money

Competition

General

Collection of the cheat sheets useful for pentesting

2.18K
580
9m
n/a

🎬 A curated list of movies every hacker & cyberpunk must watch.

8.44K
809
55d
CC0-1.0

An Intelligent network of bots that fetch the latest InfoSec content.

General information on CTF occuring around the worlds.

CTF challenge archive maintained by Jonathan Salwan.

OS RE and rootkit development

A free course that teaches beginners the basics of forensics, crypto, and web-ex.

Online resources

Website dedicated to talking about, reviewing and keeping up to date with open source operating systems

tools

Empire is a PowerShell and Python post-exploitation agent.

5.71K
2.1K
1y 4m
BSD-3-Clause

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

1.46K
305
56d
GPL-3.0

PowerSploit - A PowerShell Post-Exploitation Framework

7.76K
3.01K
109d
n/a

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

610
153
1y 10m
n/a

ETC

Top 125 Network Security Tools

Four free courses designed to teach beginners the fundamentals of computing, security, and CTFs.