awesome-cyber-security

0day.today - Biggest Exploits Database and 0day market - The Underground, is one of the world's most popular and comprehensive computer security web sites.

Self-hosted CTI-to-detection platform for ATT&CK/ATLAS mapping, IOC enrichment, TTP comparison, and analyst reporting.

ATT&CK is a knowledge base of cyber adversary behavior and taxonomy for adversarial actions across their lifecycle. ATT&CK has two parts: ATT&CK for Enterprise, which covers behavior against enterprise IT networks and cloud, and ATT&CK for Mobile, which focuses on behavior against mobile devices.

Chinese government-run vulnerability database analoguous to the United States’s CVE database hosted by Mitre Corporation.

Search public GitHub proof-of-concept repositories by CVE identifier, with 30,000+ CVEs indexed and updated daily.

cve-search is accessible via a web interface and an HTTP API. cve-search is an interface to search publicly known information from security vulnerabilities in software and hardware along with their corresponding exposures.

Security labs covering CTI, detection engineering, vulnerable cloud, AI agent security, Android, Active Directory, Windows, Linux, and malware analysis workflows.

A plethora of free cybersecurity courses and resources on all topics related to the field.

Dark Cubed’s cybersecurity resources page provides links to dozens of 100% free resources you can use for your own business or for your customers.

Offline-first, searchable arsenal of pentest & bug bounty resources: ~1500 payloads, command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells and 70 checklists.

For 20 years, the Computer Security Resource Center (CSRC) has provided access to NIST's cybersecurity- and information security-related projects, publications, news and events. CSRC supports stakeholders in government, industry and academia—both in the U.S. and internationally.

This page is devoted to helping cyber security experts find the resources they need to grow and thrive.

The listing of related sites provide additional sources to pursue the topic of Cybersecurity. The sites include Government organizations, including federal agencies, Department of Defense and military service agencies, commercial organizations, and academic institutions.

A collection of awesome software, libraries, documents, books, resources and cool stuff about security.

A curated list of amazingly awesome tools and resources related to the use of machine learning for cyber security.

A curated list of awesome malware analysis tools and resources.

A curated list of machine learning resources for automated CVE analysis

Maintained by @vaib25vicky with contributions from the security and developer communities.

A collection of awesome software, libraries, documents, books, resources and cool stuff about security.

A curated list of storage open source tools. Backups, redundancy, sharing, distribution, encryption, etc.

SBOM standard for software supply chain transparency.

An intentionally vulnerable e-commerce web application for CTF use.

The top risks specific to API security.

Application Security Verification Standard for defining security requirements.

Pragmatic checklists and best practices for secure development.

Software Composition Analysis (SCA) to find vulnerable dependencies.

Open source (GPL-3.0) autonomous AI penetration testing platform covering web, API, Active Directory and Kubernetes, orchestrating 80+ offensive tools as an MCP host with proof of exploitation and a local privacy gateway (the LLM never sees real IPs or credentials).