$ show The-Art-of-Hacking/h4cker
This repository is a comprehensive, curated collection of cybersecurity references, scripts, tools, code, labs, and training resources, primarily authored by Omar Santos. It serves as supplemental material for his books, video courses, and live training, covering a vast range of domains including offensive security, defensive security, application security, cloud/container security, hardware/embedded security, AI/ML security, and certification preparation (Cisco, CompTIA, ISC2, etc.). The repo is hybrid in nature: while it contains hundreds of runnable scripts and tools (e.g., network scanners, exploit examples, API security testers, AI-powered log analyzers), its dominant character is that of an educational knowledge base and reference library rather than a deployable application. The content is organized into clear domain directories, with extensive READMEs acting as curated indexes of tools, papers, talks, and labs. The AI security section is particularly well-developed, including course materials on agentic AI, prompt engineering, and the Foundry Security Spec. The repository is actively maintained, with recent commits and automated CI workflows, though the breadth of content introduces risks of link rot and technology churn in fast-moving areas like AI frameworks and certification blueprints.
The LLM identified 5 files worth highlighting for reuse:
A comprehensive, modular API security assessment tool that tests nine security domains (TLS, authentication, authorization, input validation, SSRF, rate limiting, etc.) and outputs structured JSON reports. It is self-contained, well-documented, and can be extracted and adapted for any API security testing pipeline, demonstrating strong software engineering practices in a security context.
A collection of YAML-based secure coding rules (CodeGuard) covering cryptography, authentication, authorization, input validation, session management, and more. Each rule is self-contained with metadata, detection logic, severity, and examples. This pattern is reusable as a portable security policy-as-code that can be integrated into CI/CD pipelines or AI coding assistants.
A reusable prompt generation system for LLM-assisted bug bounty hunting. It includes a Python script that reads a list of vulnerability types and generates structured prompts for each, along with a set of pre-built prompt templates for common vulnerabilities (XSS, SQLi, SSRF, IDOR, etc.). The pattern demonstrates how to systematically create and organize LLM prompts for security testing, and can be adapted to other domains.
A well-structured log parsing module for authentication logs that extracts failed login attempts, successful logins, and other events. It is idempotent, parameterized, and outputs structured data. This pattern is reusable for any log analysis task and demonstrates clean data extraction techniques applicable to security monitoring and incident response.
A detailed architectural blueprint for building agentic security evaluation systems, defining eight roles (Orchestrator, Indexer, Detector, Triager, Validator, Coverage-Guide, Reporter, plus extension roles) and eleven design principles. It includes a finding lifecycle, evidence gates, and a substrate pattern. This is a reusable design pattern that can be instantiated to create custom security evaluation pipelines for AI agents.