A collection of various awesome lists for hackers, pentesters and security researchers
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The-Art-of-Hacking/h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
Hacking the Hackathon
At their best, internal hackathons provide a necessary patch to systemic problems. But their usual structure limits their potential.
A GitHub Issue Title Compromised 4,000 Developer Machines
A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.
Microsoft's open source tools were hacked to steal passwords of AI developers | TechCrunch
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.
What happened after 2,000 people tried to hack my AI assistant — Fernando Irarrázaval
I built hackmyclaw.com, where anyone could email Fiu, my OpenClaw assistant, and try to make it leak the contents of a secrets.env file.
GitHub - github/awesome-copilot: Community-contributed instructions, prompts, and configurations to help you make the most of GitHub Copilot.
Community-contributed instructions, prompts, and configurations to help you make the most of GitHub Copilot. - github/awesome-copilot
sourcehut - the hacker's forge
sourcehut is a network of useful open source tools for software project maintainers and collaborators, including git repos, bug tracking, continuous integration, and mailing lists.
SagarBiswas-MultiHAT/awesome-cybersecurity-books
A curated collection of 70+ free cybersecurity books organized by domain and difficulty (🟢 Beginner → 🟡 Intermediate → 🔴 Advanced). Structured learning paths for ethical hacking, penetration testing, exploit development, malware analysis, web security, and more. No paywall. Community maintained.
The most powerful ways to "hack" our new Dia browser
Hackbase - HackerspaceWiki
A Hackbase or Hackerbase is a Live-in Hackerspace - a hackerspace with a capacity for coliving.
affaan-m/everything-claude-code
Complete Claude Code configuration collection - agents, skills, hooks, commands, rules, MCPs. Battle-tested configs from an Anthropic hackathon winner.
ROOST (Mirror) / awesome-safety-tools · GitLab
Mirror of https://github.com/roostorg/awesome-safety-tools
GitHub MCP Exploited: Accessing private repositories via MCP
We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.
ua-hacks/apps/experimental-iwa-controlledframe-tldraw/test_app/src at main · ua-community/ua-hacks
Prototypes focused on our active research areas at User & Agents. - ua-community/ua-hacks