User Experience on mobile might not be great yet, but I'm working on it.

Your first time on this page? Allow me to give some explanations.

Awesome Hacking

A curated list of awesome Hacking tutorials, tools and resources

Here you can see meta information about this topic like the time we last updated this page, the original creator of the awesome list and a link to the original GitHub repository.

Last Update: May 19, 2022, 10:04 p.m.

Thank you carpedm20 & contributors
View Topic on GitHub:
carpedm20/awesome-hacking

Search for resources by name or description.
Simply type in what you are looking for and the results will be filtered on the fly.

Further filter the resources on this page by type (repository/other resource), number of stars on GitHub and time of last commit in months.

Tutorials

Tools

Metasploit Framework

26.36K
11.96K
96d
n/a

A little tool to play with Windows security

14.36K
2.86K
8m
n/a

Docker Images for Penetration Testing & Security

General

Tutorials

Disassemblers and debuggers

An open-source x64/x32 debugger for windows.

37.61K
1.71K
6m
GPL-3.0

UNIX-like reverse engineering framework and command-line toolset

15.2K
2.56K
6m
LGPL-3.0

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

2.95K
305
8m
GPL-3.0

Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

374
50
1y 5m
GPL-3.0

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

5.45K
1.26K
6m
n/a

Decompilers

Java decompiler, assembler, and disassembler

1.45K
176
1y 14d
GPL-3.0

A standalone Java Decompiler GUI

10.53K
1.95K
1y 4d
GPL-3.0

An Open Source Java Decompiler Gui for Procyon

4.24K
884
7m
Apache-2.0

Dex to Java decompiler

27.58K
3.4K
6m
Apache-2.0

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

13.72K
2.63K
6m
n/a

.NET debugger and assembly editor

20.1K
3.86K
1y 5m
n/a

Free and Open Source Reverse Engineering Platform powered by rizin

9.86K
787
6m
GPL-3.0

RetDec is a retargetable machine-code decompiler based on LLVM.

6.26K
759
6m
n/a

Snowman decompiler

1.97K
292
11m
n/a

A cross-version Python bytecode decompiler

2.4K
285
6m
GPL-3.0

Deobfuscators

.NET deobfuscator and unpacker.

5.39K
2K
1y 8m
GPL-3.0

Beautifier for javascript

7.58K
1.3K
5m
MIT

Other

Get inside your JVM

148
14
2y 38d
MIT

Tools to work with android .dex and java .class files

9.07K
1.72K
6m
Apache-2.0

.NET anti-managed debugger and anti-profiler code

257
133
8y 38d
n/a

Execution logging and tracing

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

25.07K
3.11K
6m
MIT

USB packet capture for Windows

596
141
1y 6m
n/a

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

284
38
2y 9m
MIT

Drltrace is a library calls tracer for Windows and Linux applications.

311
60
1y 9m
BSD-3-Clause

Hex editors

Other

Firmware Analysis Tool

7.84K
1.21K
6m
MIT

Binary data analysis and visualization tool

813
87
2y 11m
Apache-2.0

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Perl / PHP / Python / Ruby

2.69K
140
8m
n/a

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

599
75
1y 5m
ISC

A patch analysis tool

354
71
1y 9m
n/a

Free universal database tool and SQL client

24.51K
2.31K
97d
Apache-2.0

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

4.21K
368
6m
MIT

General

Tools

Automatic SQL injection and database takeover tool

22.39K
4.68K
98d
n/a

Automated NoSQL database enumeration and web application exploitation tool.

1.88K
484
1y 96d
GPL-3.0

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

866
211
11m
GPL-3.0

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

4.38K
658
6m
MIT

Scriptable network authentication cracker (formerly badtouch)

293
35
11m
GPL-3.0

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

1.48K
373
6m
GPL-3.0

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

189
56
1y 11m
MIT

General

More than 100 security checks for your Node.js API

463
30
11m
n/a

Tools

A Linux packet crafting tool.

415
38
1y 6m
GPL-2.0

Man in the Middle SOCKS Proxy for JAVA

27
11
9y 97d
n/a

SSH man-in-the-middle tool

1.39K
202
10m
n/a

An engine to make Tor network your default gateway

1.17K
255
12m
n/a

Hacking Toolkit

712
151
10m
BSD-3-Clause

Great packages that use Scapy

41
17
7m
CC-BY-4.0

In-depth Attack Surface Mapping and Asset Discovery

6.05K
1.14K
6m
Apache-2.0

Secure multithreaded packet sniffer

811
74
4m
GPL-3.0

Discover internet-wide misconfigurations while drinking coffee

302
33
1y 9d
MIT

🤖 The Modern Port Scanner 🤖

4.91K
413
6m
GPL-3.0

Tools

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

1.92K
540
6m
n/a

The Sleuth Kit and other digital forensics tools

Tools

A tool to analyze multi-byte xor cipher

1.07K
156
12m
n/a

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

8.82K
549
6m
MIT

System

Reverse Engineering

Web

Cryptography

Bug bounty

A list of interesting payloads, tips and tricks for bug bounty hunters.

3.58K
1.22K
1y 1d
CC-BY-SA-4.0

Bug bounty - Earn Some Money

Competition

General

Online resources

tools

Empire is a PowerShell and Python post-exploitation agent.

6.23K
2.41K
2y 4m
BSD-3-Clause

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

1.73K
363
6m
GPL-3.0

PowerSploit - A PowerShell Post-Exploitation Framework

8.85K
3.63K
1y 9m
n/a

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

660
165
3y 113d
n/a

ETC