Scripts that are intended to help you in your pen-testing and bug-hunting efforts by automating various manual tasks, making your work more efficient and effective.
☆107Jul 12, 2026Updated 3 months ago
Alternatives and similar repositories for Offensive-Pentesting-Scripts
Users that are interested in Offensive-Pentesting-Scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proper approach to pentest a Web application with the mixture of all useful payloads and complete testing guidance of attacks. Designed…☆125Feb 12, 2025Updated last year
- List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.☆460Mar 16, 2026Updated 7 months ago
- This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides informa…☆14Dec 31, 2023Updated 2 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Production-grade XXE scanner that combines statistical baselining, differential parser fingerprinting, and OOB confirmation to find what …☆13Sep 25, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Chrome Dump Password☆13Nov 17, 2025Updated 11 months ago
- Parallelized enumeration tool for red team engagements and bug bounty programs.☆16Mar 31, 2021Updated 5 years ago
- OpenAI Security Console - Python3 AI-powered Cybersecurity Framework☆17Mar 25, 2023Updated 3 years ago
- ☆11Dec 17, 2023Updated 2 years ago
- A penetration test reporting tool☆10Mar 8, 2023Updated 3 years ago
- robertfoster's PKGBUILD☆11Updated this week
- HTB_Write_Ups☆27Feb 25, 2024Updated 2 years ago
- Autorev.sh generates reverse shell codes for reverse shell . Supports linux and windows☆17Apr 8, 2022Updated 4 years ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Write-ups cho một số bài trên Reversing.kr☆15Mar 24, 2023Updated 3 years ago
- ☆11Jun 5, 2022Updated 4 years ago
- Automate Nuclei scans and streamline bug hunting workflows☆20Feb 16, 2024Updated 2 years ago
- Bypass 403 pages☆131Jun 30, 2024Updated 2 years ago
- Offensive Nmap guide for penetration testers and red teamers. Includes practical examples, evasion techniques, and advanced usage for net…☆12Mar 16, 2026Updated 7 months ago
- This tool automates the process of running FFUF (Fuzz Faster U Fool) and post-processing its results to extract valid URLs. It supports b…☆36Nov 5, 2024Updated last year
- Javascript library fuzzer. Tries to detect functions which may lead to XSS vulnerabilities if untrusted data is passed to said functions.☆17Oct 6, 2020Updated 6 years ago
- Collection of Penetration Testing Interview Questions across various domains, including Information Security, Network Security, Web Secur…☆80Jul 14, 2026Updated 3 months ago
- Monitor your target continuously for new subdomains!☆25Mar 18, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SNMP enumeration script☆12Jun 29, 2019Updated 7 years ago
- Dnsbruter is a powerful tool designed to perform active subdomain enumeration and discovery. It uses DNS resolution to efficiently brutef…☆128Dec 17, 2024Updated last year
- BloodHound Data Scanner☆45Jul 7, 2020Updated 6 years ago
- ☆21Jun 26, 2024Updated 2 years ago
- Utility to check the integrity of your DNS managed zones at your cloud service provider☆15Jan 19, 2022Updated 4 years ago
- These are the scripts & methodologies that can be used in Buffer Over Flow Fuzzing and Exploitation☆18Oct 3, 2021Updated 5 years ago
- ☆12Apr 5, 2025Updated last year
- A collection of Burp Suite Lambda Filters ~ Bambdas☆32Oct 1, 2024Updated 2 years ago
- Burp suite extension which help you to find inconsistency between content-type header and body parsers☆12Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆50Jan 9, 2024Updated 2 years ago
- OSCP Notes written from PWK Course☆54Apr 26, 2021Updated 5 years ago
- Just some random Red Team Scripts that can be useful☆155May 12, 2026Updated 5 months ago
- ☆36Nov 26, 2024Updated last year
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆388May 19, 2023Updated 3 years ago
- Prototype Pollution - A detailed study + hands on lab.☆16Oct 11, 2022Updated 4 years ago
- RCE PoC for Empire C2 framework <5.9.3☆28Feb 24, 2024Updated 2 years ago