A proper approach to pentest a Web application with the mixture of all useful payloads and complete testing guidance of attacks. Designed as a quick reference cheat sheet for your pentesting and bug bounty engagement.
☆125Feb 12, 2025Updated last year
Alternatives and similar repositories for Offensive-Pentesting-Web
Users that are interested in Offensive-Pentesting-Web are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts that are intended to help you in your pen-testing and bug-hunting efforts by automating various manual tasks, making your work mo…☆107Jul 12, 2026Updated 3 months ago
- Passive Reconnaissance Techniques Approach helps for penetration testing and bug bounty hunting by gathering information about a target s…☆23Aug 19, 2025Updated last year
- List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.☆460Mar 16, 2026Updated 7 months ago
- ☆17Oct 16, 2025Updated last year
- Web Application Penetration Testing☆161Jun 2, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Anti-forensics tool Inspired by NSA's Marble framework.☆10Apr 17, 2025Updated last year
- Wordlists for Fuzzing☆11Jul 18, 2020Updated 6 years ago
- Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload☆12Dec 27, 2021Updated 4 years ago
- Right-To-Left Override POC☆36Mar 21, 2022Updated 4 years ago
- Comprehensive guide to configuring Kali Linux, a Debian-based Linux distribution designed for penetration testers. The guide covers every…☆43Jan 6, 2025Updated last year
- Collection of Penetration Testing Interview Questions across various domains, including Information Security, Network Security, Web Secur…☆80Jul 14, 2026Updated 3 months ago
- ☆28Mar 30, 2026Updated 7 months ago
- Red Team Techniques & TTPs: AD, C2, SCADA, PrivEsc, Web Hacking, Buffer Overflow, WiFi.☆18Oct 26, 2026Updated last week
- This script was developped to assist in SpearPhishing campaign during Red Team operations. It can be used to generate random name based o…☆13Feb 6, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Ant is a post-exploitation tool designed to automate the deployment of tunnels and port forwarding based on a predefined topology configu…☆17Jan 31, 2024Updated 2 years ago
- Awesome Mobile Application Penetration Testing Cheat Sheet☆24May 29, 2021Updated 5 years ago
- A curated collection of courses, videos, and resources to master network security from the ground up.☆10Jan 6, 2025Updated last year
- Collection of fuzzing payloads and corpus from all around added as sub modules☆15Oct 23, 2026Updated last week
- ☆30Aug 22, 2019Updated 7 years ago
- Many script that can be modified according to your needs for Information Gathering and Asset discovery in Bug Bounty Hunting (Pull reques…☆62Feb 26, 2024Updated 2 years ago
- Items related to the RedELK workshop given at security conferences☆29Sep 28, 2023Updated 3 years ago
- Shellcode loader that hides payload within Egyptian hieroglyphic Unicode characters (U+13000 plane) to evade detection. It decodes the gl…☆16Nov 20, 2025Updated 11 months ago
- Learn AWS Security by Example☆22Apr 20, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Aug 31, 2020Updated 6 years ago
- Write-Ups for TryHackMe☆22May 15, 2021Updated 5 years ago
- List of pentest related scripts edited or created by GoVanguard☆11Nov 4, 2024Updated last year
- ☆11Dec 17, 2023Updated 2 years ago
- MetaInjector is a tool designed to test security by injecting malicious payloads (such as XSS, SQL Injection, remote code execution, etc…☆13Sep 7, 2024Updated 2 years ago
- Pentesting tool to automate common op tasks and organize discovered data.☆14Oct 16, 2026Updated 2 weeks ago
- ☆105Aug 31, 2021Updated 5 years ago
- Sample Obsidian's vault for web pentesting☆115Aug 8, 2024Updated 2 years ago
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides informa…☆14Dec 31, 2023Updated 2 years ago
- API research and learning☆12May 22, 2019Updated 7 years ago
- DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it☆13Mar 5, 2021Updated 5 years ago
- Malware development: persistence - part 1: startup folder registry keys. C++ implementation☆13Apr 21, 2022Updated 4 years ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆242Oct 23, 2026Updated last week
- LFI/RFI Payload Tests Project☆37Oct 21, 2019Updated 7 years ago
- Python based Web Scraper which can discover JavaScript files and parse them for juicy information (API keys, IP's, Hidden Paths etc)☆17Feb 17, 2022Updated 4 years ago