A visual reference of 118 essential red team tools, frameworks & standards, organized like a periodic table. Includes a printable PDF version.
☆140Nov 4, 2025Updated 11 months ago
Alternatives and similar repositories for periodic-table-offensive-security
Users that are interested in periodic-table-offensive-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆10Nov 3, 2025Updated 11 months ago
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆54Jul 17, 2025Updated last year
- Kustonaut's KQL Cheat Sheet☆16Feb 26, 2026Updated 8 months ago
- Basic brute-force script targeting the standard Keycloak Admin/User Console browser login flow.☆27Apr 6, 2025Updated last year
- Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Ma…☆49Jul 8, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- ☆11Oct 15, 2024Updated 2 years ago
- Detects and reports malicious clipboard content (PowerShell, mshta, etc.) on any page, with user alerts.☆16Oct 5, 2025Updated last year
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- ☆19Dec 18, 2024Updated last year
- React2Shell is a Python-based proof-of-concept tool designed to exploit CVE-2025-55182 and CVE-2025-66478, both impacting Next.js applica…☆13Dec 9, 2025Updated 10 months ago
- Cloud subdomains identification tool☆62Apr 15, 2025Updated last year
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆58Jun 21, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Secret Key Scanner, Sensitive Directory Finder, Security Headers Analyzer, Risk Scoring, Exportable HTML Reports.☆21Nov 30, 2025Updated 11 months ago
- ☆19Jun 28, 2026Updated 4 months ago
- Interactive visual reference of 118 Digital Forensics & Incident Response (DFIR) tools organized into 9 categories. Includes a high-resol…☆42Sep 9, 2026Updated last month
- A Burp Suite extension that redacts PII, credentials, and other sensitive data from HTTP traffic with one click, enabling secure sharing …☆26Mar 30, 2026Updated 7 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆232Mar 28, 2025Updated last year
- The purpose of this tool is: 1. to transliterate and generate possible usernames out of a full names list that may include names written …☆139Jul 19, 2024Updated 2 years ago
- Rapid Large-Scale Hunting and Collection for Enterprise AD Networks☆10May 7, 2025Updated last year
- ☆14Feb 1, 2026Updated 9 months ago
- PDump is a project for dumping leaked credentials from DEHASHED☆17Jan 21, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- BaldHead is a modular and interactive Active Directory (AD) attack framework built for red teamers and security testers. It automates enu…☆110Apr 11, 2026Updated 6 months ago
- My personal notes and programs for the book "Hacking: The Art Of Exploitation." (https://nostarch.com/hacking2.htm)☆14May 22, 2024Updated 2 years ago
- ☆31May 31, 2022Updated 4 years ago
- This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interview…☆388Oct 7, 2026Updated 3 weeks ago
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 7 months ago
- ☆26Sep 5, 2025Updated last year
- All the deals for InfoSec related software/tools this Black Friday☆264Nov 28, 2025Updated 11 months ago
- Mannu Shell is PHP web based shell. This code is meant for performing server side file manipulation and other stuffs. Its backdoor free a…☆17Jun 27, 2018Updated 8 years ago
- Explore the GOAD Active Directory lab in 5 minutes with Adalanche☆44Jan 10, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Repository with all the tools I use during CTFs and Pentesting.☆15Nov 30, 2023Updated 2 years ago
- Executing Shellcode with ReadDirectoryChanges’s Hidden Callback☆32Oct 13, 2025Updated last year
- MCP to help Defenders Detection Engineer Harder and Smarter☆17Jun 19, 2026Updated 4 months ago
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- ☆81Aug 27, 2025Updated last year
- ☆19Aug 31, 2023Updated 3 years ago
- DWipe is a powerful cross-platform tool for securely wiping free space and formatting drives to prevent data recovery. It implements DoD-…☆18May 23, 2026Updated 5 months ago