User Experience on mobile might not be great yet, but I'm working on it.

Your first time on this page? Allow me to give some explanations.

Awesome Hacking

A curated list of awesome Hacking tutorials, tools and resources

Here you can see meta information about this topic like the time we last updated this page, the original creator of the awesome list and a link to the original GitHub repository.

Last Update: Dec. 4, 2021, 3:05 p.m.

Thank you carpedm20 & contributors
View Topic on GitHub:
carpedm20/awesome-hacking

Search for resources by name or description.
Simply type in what you are looking for and the results will be filtered on the fly.

Further filter the resources on this page by type (repository/other resource), number of stars on GitHub and time of last commit in months.

Tutorials

Tools

Metasploit Framework

25.67K
11.75K
10d
n/a

A little tool to play with Windows security

14.36K
2.86K
78d
n/a

Docker Images for Penetration Testing & Security

General

Tutorials

Disassemblers and debuggers

An open-source x64/x32 debugger for windows.

37.61K
1.71K
31d
GPL-3.0

UNIX-like reverse engineering framework and command-line toolset

15.2K
2.56K
30d
LGPL-3.0

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

2.95K
305
95d
GPL-3.0

Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

374
50
1y 9d
GPL-3.0

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

5.33K
1.23K
21d
n/a

Decompilers

Java decompiler, assembler, and disassembler

1.45K
176
7m
GPL-3.0

A standalone Java Decompiler GUI

10.53K
1.95K
6m
GPL-3.0

An Open Source Java Decompiler Gui for Procyon

4.24K
884
56d
Apache-2.0

Dex to Java decompiler

27.58K
3.4K
36d
Apache-2.0

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

13.72K
2.63K
30d
n/a

.NET debugger and assembly editor

19.58K
3.66K
12m
n/a

Free and Open Source Reverse Engineering Platform powered by rizin

9.86K
787
35d
GPL-3.0

RetDec is a retargetable machine-code decompiler based on LLVM.

6.26K
759
32d
n/a

Snowman decompiler

1.97K
292
5m
n/a

A cross-version Python bytecode decompiler

2.4K
285
31d
GPL-3.0

Deobfuscators

.NET deobfuscator and unpacker.

5.39K
2K
1y 97d
GPL-3.0

Beautifier for javascript

7.49K
1.28K
4d
MIT

Other

Get inside your JVM

147
13
1y 7m
MIT

Tools to work with android .dex and java .class files

9.07K
1.72K
31d
Apache-2.0

.NET anti-managed debugger and anti-profiler code

257
133
7y 7m
n/a

Execution logging and tracing

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

25.07K
3.11K
31d
MIT

USB packet capture for Windows

596
141
1y 37d
n/a

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

284
38
2y 115d
MIT

Drltrace is a library calls tracer for Windows and Linux applications.

311
60
1y 110d
BSD-3-Clause

Hex editors

Other

Firmware Analysis Tool

7.84K
1.21K
32d
MIT

Binary data analysis and visualization tool

813
87
2y 5m
Apache-2.0

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Perl / PHP / Python / Ruby

2.69K
140
102d
n/a

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

599
75
11m
ISC

A patch analysis tool

354
71
1y 104d
n/a

Free universal database tool and SQL client

23.51K
2.22K
1d
Apache-2.0

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

4.21K
368
35d
MIT

General

Tools

Automatic SQL injection and database takeover tool

21.8K
4.6K
1d
n/a

Automated NoSQL database enumeration and web application exploitation tool.

1.88K
484
9m
GPL-3.0

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

866
211
6m
GPL-3.0

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

4.38K
658
31d
MIT

Scriptable network authentication cracker (formerly badtouch)

293
35
6m
GPL-3.0

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

1.48K
373
33d
GPL-3.0

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

189
56
1y 5m
MIT

General

More than 100 security checks for your Node.js API

445
28
5m
n/a

Tools

A Linux packet crafting tool.

410
38
1y 32d
GPL-2.0

Man in the Middle SOCKS Proxy for JAVA

27
11
8y 9m
n/a

SSH man-in-the-middle tool

1.39K
202
5m
n/a

An engine to make Tor network your default gateway

1.17K
255
6m
n/a

Hacking Toolkit

712
151
4m
BSD-3-Clause

Great packages that use Scapy

41
17
54d
CC-BY-4.0

In-depth Attack Surface Mapping and Asset Discovery

6.05K
1.14K
30d
Apache-2.0

Secure multithreaded packet sniffer

782
68
38d
GPL-3.0

Discover internet-wide misconfigurations while drinking coffee

302
33
6m
MIT

🤖 The Modern Port Scanner 🤖

4.91K
413
30d
GPL-3.0

Tools

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

1.92K
540
30d
n/a

The Sleuth Kit and other digital forensics tools

Tools

A tool to analyze multi-byte xor cipher

1.07K
156
6m
n/a

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

8.82K
549
31d
MIT

System

Reverse Engineering

Web

Cryptography

Bug bounty

A list of interesting payloads, tips and tricks for bug bounty hunters.

3.58K
1.22K
6m
CC-BY-SA-4.0

Bug bounty - Earn Some Money

Competition

General

Online resources

tools

Empire is a PowerShell and Python post-exploitation agent.

6.23K
2.41K
1y 10m
BSD-3-Clause

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

1.73K
363
36d
GPL-3.0

PowerSploit - A PowerShell Post-Exploitation Framework

8.85K
3.63K
1y 109d
n/a

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

660
165
2y 10m
n/a

ETC