awesome-hacking-resources

Easy to navigate database of exploits

Indie cybersecurity info managed by 1 person

database of a wide variety exploits, CVE compliant archive

Disclosures and write-ups of real AI vulnerabilities from Mozilla's bug-bounty program.

Gamified AI CTF training community on prompt injection and jailbreaking against interactive AI characters.

Linux Foundation library covering evasion, poisoning, extraction, and inference attacks across all major ML frameworks.

Collection of real, working exploits for vulnerabilities found in AI/ML tools and platforms.

Classic library for crafting adversarial examples against image models.

Most-starred LLM security awesome list.

few videos, very short, specific to 0patch

Channel with couple challenges, well explained

in

lots of lengthy con-style talks

curated index of non-English-speaking IT security YouTubers and creators

Long con-style talks from the Balkan Computer Congress, doesn't update regularly

hacker, malware, computer engineering, Reverse engineering

hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum

hacking and security forum

posting webstite for hacks/exploits/various discussion

Abusing SUDO (Linux Privilege Escalation)

Basics of Linux privilege escalation

automated scripts that downloads and compiles from exploitdb

basic linux exploitation, also covers Windows

Editing /etc/passwd File for Privilege Escalation

Linux Privilege Escalation – Tradecraft Security Weekly (Video)

as the title says, this course isn't for beginners

35 "no bullshit" binary videos along with other info

detailed tutorial, lots of good information about memory

a series of 9 exploit tutorials,also features a podcast

Through a series of levels you'll learn about common mistakes and gotchas when using Amazon Web Services (AWS).

tons of tutorials from infosec pro Azeria, follow her on twitter

OWASP project for in-depth attack-surface mapping and external asset discovery

Bellingcat's curated, regularly updated toolkit and how-to guides

Fast username and email OSINT search across 600+ services

OSINT tool for estimating the age of web pages from HTTP metadata

Enumerate public resources in AWS, Azure, and GCP for a target keyword

OSINT toolkit for investigating Google accounts (Gmail, Drive, Calendar exposure)

open source community project, promoting security in IT enivornments

Arch Linux based pentesting distro, compatible with Arch installs

advanced GNU Linux pen-testing technology

Image with the more used tools to create a pentest environment easily and quickly.

the infamous pentesting distro from the folks at Offensive Security

pentesting OS based on Ubuntu