A living document for penetration testing and offensive security.
☆319Jun 20, 2024Updated 2 years ago
Alternatives and similar repositories for handbook
Users that are interested in handbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A learning and testing environment for web application hacking and pentesting.☆28Jan 2, 2021Updated 5 years ago
- A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics …☆639Sep 24, 2025Updated last year
- eLearnSecurity Junior Penetration Tester Certificate (eJPT) PTS Notes☆153Jun 12, 2021Updated 5 years ago
- Red Team Techniques & TTPs: AD, C2, SCADA, PrivEsc, Web Hacking, Buffer Overflow, WiFi.☆18Updated this week
- RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.☆1,938Oct 29, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆12Feb 18, 2022Updated 4 years ago
- Hackfruit is an easy search tool that finds hacking tools, commands and cheat sheets. It helps cybersecurity learing and trainings, CTFs,…☆23Dec 19, 2022Updated 3 years ago
- A curated collection of courses, videos, and resources to master network security from the ground up.☆10Jan 6, 2025Updated last year
- 「🐞」Bug Bounty Tricks☆42Oct 4, 2023Updated 3 years ago
- ☆2,115Jul 29, 2026Updated 3 months ago
- A compact guide to network pivoting for penetration testings / CTF challenges.☆228Jul 19, 2024Updated 2 years ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆35Feb 12, 2022Updated 4 years ago
- simple bash script to earn bounties☆37Apr 27, 2024Updated 2 years ago
- Google Dorking Payloads☆13Jun 24, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.☆47Nov 23, 2021Updated 4 years ago
- JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)☆837Jul 7, 2026Updated 3 months ago
- WebSocket Connection Smuggler☆48Sep 30, 2022Updated 4 years ago
- My public talks☆15Oct 1, 2024Updated 2 years ago
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆6,789May 27, 2026Updated 5 months ago
- ☆16May 20, 2022Updated 4 years ago
- Code and notes regarding Malware Development☆11Oct 30, 2022Updated 4 years ago
- Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and n…☆12,646Updated this week
- Red Teaming Tactics and Techniques☆4,728Jun 13, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automat…☆2,606Updated this week
- Mimikatz implementation in pure Python☆3,372Apr 9, 2026Updated 6 months ago
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆2,779Jul 6, 2025Updated last year
- the most basic DLL ever to pop a cmd.☆25Jul 11, 2020Updated 6 years ago
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆30Aug 20, 2024Updated 2 years ago
- Python version of the C# tool for "Shadow Credentials" attacks☆952Oct 8, 2026Updated 3 weeks ago
- Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet☆5,666Dec 12, 2024Updated last year
- Commands, snippets, exploits, tools, lists, collections and techniques I used on my journey to becoming an OSCP.☆324Mar 10, 2021Updated 5 years ago
- Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)☆165Nov 1, 2025Updated 11 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This project is aimed at freely providing technical guides on various hacking topics.☆1,146Oct 3, 2026Updated 3 weeks ago
- ☆212Mar 4, 2022Updated 4 years ago
- Wireless Pentesting Device☆25Aug 14, 2020Updated 6 years ago
- Offensive Security Certified Profesional (OSCP) course scripts, some have been generalized☆51Oct 29, 2017Updated 9 years ago
- ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the…☆990Oct 15, 2024Updated 2 years ago
- Find CVE PoCs on GitHub☆166Aug 1, 2025Updated last year
- Rockyou for web fuzzing☆3,283Sep 22, 2026Updated last month