List of Awesome Red Teaming Resources
☆47Jan 9, 2018Updated 8 years ago
Alternatives and similar repositories for Awesome-Red-Teaming
Users that are interested in Awesome-Red-Teaming are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BurpSuite Extension leveraging new Montoya API to automatically sets payload positions to your inruder tab saving you time during VAPT.☆19Feb 21, 2026Updated 7 months ago
- A Series of Tweets☆15Jan 30, 2024Updated 2 years ago
- github军火库☆21May 24, 2017Updated 9 years ago
- Generic fuzzing wordlist to test for SQLi. Merged from different SQLi wordlists.☆17Jul 24, 2021Updated 5 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration …☆11Nov 17, 2025Updated 10 months ago
- Highly recommended dorks for bug bounty☆20Oct 17, 2021Updated 4 years ago
- ScanExp automates the scanning of any machine's open ports via the ip address and performs a brute force attack on ports 20, 21 for the F…☆27Oct 14, 2023Updated 2 years ago
- Strafer: A tool to detect potential infections in Elasticsearch instances☆27Mar 14, 2021Updated 5 years ago
- PowerShell module providing utility commands to manipulate a APK file on Windows☆16Apr 14, 2025Updated last year
- Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).☆19Oct 30, 2023Updated 2 years ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Script to generate markdown of API endpoints which then can be used to produce visual mindmap. Supports txt as well as Burp xml as input.☆13Mar 18, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 4 years ago
- ☆11May 15, 2020Updated 6 years ago
- A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.☆13Jun 9, 2020Updated 6 years ago
- Ultra fast hashcracking tool written in Python3☆12Mar 28, 2021Updated 5 years ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- tool to bypass 403/401 pages ( helpful for bug hunting)☆19May 7, 2023Updated 3 years ago
- Bash script to automate Bug Bounty Reconnaissance☆46Jan 3, 2021Updated 5 years ago
- XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible lin…☆15Nov 25, 2019Updated 6 years ago
- [Forked] This repo is for learning various heap exploitation techniques.☆10Sep 6, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Scripts to automate RECON process☆12Aug 31, 2025Updated last year
- Personal Notes.☆11Jun 2, 2018Updated 8 years ago
- shARP_2.0 is an updated version for shARP with more options for better performance.☆12Oct 12, 2017Updated 9 years ago
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- Envoy Wasm filter for traffic tracing used in APIClarity.☆13Jun 19, 2024Updated 2 years ago
- 10 Reset Password Flaws Based on Web Application Security☆11Oct 19, 2020Updated 5 years ago
- A database of options to use when pen testing an application. Sample XSS, SQLi and much more. It's been gathered over time. It's not perf…☆16Oct 21, 2020Updated 5 years ago
- Automate bug bounty recon using bash alias☆15Aug 6, 2024Updated 2 years ago
- A wordlist for brute forcing directories / files☆10Jul 7, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- API research and learning☆12May 22, 2019Updated 7 years ago
- 渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……☆38Aug 21, 2018Updated 8 years ago
- ☆14Apr 18, 2018Updated 8 years ago
- Burp Suite Extension to monitor new scope☆16Mar 31, 2021Updated 5 years ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Updated this week
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated 2 years ago
- XSS scanner tool to scan a list of URLs provided in a .txt file for reflected XSS(rxss) vulnerabilities. This tool is designed to efficie…☆14Jun 29, 2024Updated 2 years ago