
123.2k stars · CC0-1.0 | — · no releases at all — a determination, not a gap, re-confirmed 20 October 2026. Recency from ungh.cc: pushedAt 2026-05-07. · Track this in Scout
An index of 81 curated security reading lists, with one line on each.
▶Repo detailsthe review · specs · pros & cons · install
What it does
The repository is a single README containing two tables: 47 entries under "Awesome Repositories" and 34 under "Other Useful Repositories". Each row is a name, a link and one sentence. The subjects run across application and web security, malware analysis and reverse engineering, threat intelligence and incident response, penetration testing and red teaming, bug bounty programmes and capture-the-flag puzzles, embedded and Internet-of-Things security, vehicle and drone security, Android, open-source intelligence, fuzzing, password cracking, forensics, Tor, Web3 and — newer — prompt-injection attacks against AI systems. It is published under CC0-1.0, which puts it in the public domain, so the whole thing can be copied into your own notes without asking. It has 116,878 stars, no releases, and the last change landed on 7 May 2026. It contains no tools, no code and no explanations: every row sends you somewhere else, and whether the destination is current is the destination's problem, not this repository's.
Why it matters
Who it suits. Anyone starting out in security, or anyone experienced who has been handed a topic outside their usual corner and needs the best starting list rather than the first search result. It is also a good shape to copy: two tables and one sentence per row stays readable at 81 entries, which most link collections do not manage. Skip it if you already know the landscape, because you will recognise most of it, and skip it if you learn by doing rather than by reading.
Verdict. Worth ten minutes once, then a bookmark. Treat it as a map, not as a syllabus: a list of lists has two layers of staleness, and the only date you can check is this repository's own. The rows that point at living projects — PayloadsAllTheThings, the OWASP cheat sheets — are worth far more than the rows that point at a list somebody abandoned in 2019, and nothing on the page tells you which is which. So open three or four rows, see which destinations are still moving, and keep those. The star count is remarkable and means very little: a list is easy to star and costs nothing to keep.
- 81 starting points across the whole of security, each with one line saying what it is.
- CC0-1.0, so the content is public domain and may be copied or forked freely.
- Covers newer ground as well as old, including prompt-injection and Web3 security.
- No code and no explanation: it only sends you elsewhere, and judging the destinations is your work.
- A list of lists goes stale twice over, and nothing marks which rows still lead somewhere active.
- Last changed 7 May 2026, with no releases, so there is no version to pin or watch.
- swisskyrepo/PayloadsAllTheThings
Not an index but the material itself: attack payloads and filter-evasion techniques sorted by vulnerability type.
Track this in Scout - enaqx/awesome-pentest
One level down: a single long list of penetration-testing tools, books and conferences rather than a list of lists.
Track this in Scout - sindresorhus/awesome
The same format applied to every subject rather than to security alone; the original of the pattern.
Track this in Scout
git clone https://github.com/Hack-with-Github/Awesome-Hacking.git
