Hack-with-Github/Awesome-Hacking
A meta-list of awesome lists for hackers, pentesters, and security researchers — the entry point for finding the right specialized list per security domain.
What it is
A curated index of awesome-list-style repositories scoped to security: bug bounty resources, fuzzing, hacking tutorials, reverse engineering, penetration testing (on Windows, on Android, on web), security tooling, OSINT, exploit databases, and CTF practice. Each entry points to its own specialized awesome-list rather than duplicating content here. CC0-1.0 licensed — public domain, fully redistributable.
Key features
- Coverage spans bug bounty, fuzzing, hacking, reverse engineering, pentesting (multi-platform), Android/iOS security, and more.
- Each entry links to a domain-specific awesome-list maintained elsewhere.
- CC0-1.0 license — public-domain-equivalent.
- Mirrored at hackwithgithub.in (companion site, not always live).
- Tightly curated — open-issues count of 33 against 113k stars indicates aggressive triage.
Tech stack
- Markdown content only.
- No code, no build pipeline.
When to reach for it
- You're entering a security niche (e.g. "I want to start fuzzing") and need a vetted starting point.
- You're a CTF organizer or security trainer assembling reading lists.
- You're building meta-tooling that needs a license-clean catalog of security resources.
When not to reach for it
- You want one comprehensive list — this is a meta-list; you'll hop through at least one indirection.
- You want active intelligence (live CVE feeds, threat alerts) — that's a different category.
- You want red-team-only or blue-team-only filtering — the list mixes offensive and defensive resources.
Maturity signal
113k stars, 10k forks, CC0-1.0, last push 2026-05-07 — actively curated. 9-year-old project. The CC0-1.0 license is rare for security-content collections and makes this trivially safe to vendor into training corpora, internal references, or derivative directories. The 3,954 watcher count is unusually high; security professionals subscribe to track new specialized lists as they get added.
Alternatives
sindresorhus/awesome— broader meta-list across all topics, not security-scoped.- Per-domain lists directly (e.g.
nu11secur1ty/awesome-cybersecurityfor breadth,bnagy/awesome-fuzzingfor fuzzing specifically). - ATT&CK, MITRE, OWASP — use when you want authoritative reference taxonomies rather than community lists.
Notes
The "meta-list of awesome-lists" framing is the project's identity — every entry deliberately delegates depth elsewhere. CC0-1.0 is unusually permissive for this kind of curation; safe target for re-indexing or vendor-into-internal-tooling.
Tags
awesome-list, security, hacking, penetration-testing, reverse-engineering, fuzzing, bug-bounty, creative-commons, curated-directory