List of awesome penetration testing resources, tools and other shiny things
☆342Jun 19, 2018Updated 8 years ago
Alternatives and similar repositories for Penetration-Testing
Users that are interested in Penetration-Testing are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.☆441May 10, 2026Updated 3 months ago
- Collection of quality safety articles. Awesome articles.☆2,112Sep 26, 2024Updated last year
- Attack and defend active directory using modern post exploitation adversary tradecraft activity☆4,850Jul 29, 2025Updated last year
- Burpsuite HTTP 插件，主要用于内网测试，可定制Content-Type和Response Content☆24Jul 2, 2018Updated 8 years ago
- Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.☆637Jul 16, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 常用系统服务默认端口列表☆13Apr 25, 2017Updated 9 years ago
- Tricks for penetration testing☆589Apr 22, 2026Updated 3 months ago
- Collection of the cheat sheets useful for pentesting☆4,359Feb 16, 2024Updated 2 years ago
- List of Awesome Red Teaming Resources☆8,054Dec 28, 2023Updated 2 years ago
- Automate SSH communication with firewalls, switches, etc.☆28Mar 29, 2018Updated 8 years ago
- IDS Bypass tricks☆121Jan 11, 2019Updated 7 years ago
- DarthSidious 中文版☆411Dec 22, 2018Updated 7 years ago
- \ PowerAvails Powershell /☆10Jun 30, 2018Updated 8 years ago
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆816Nov 28, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool made to automate tasks of pentesting.☆165May 20, 2026Updated 2 months ago
- Various public documents, whitepapers and articles about APT campaigns☆3,667Jan 1, 2024Updated 2 years ago
- Ephemera and other documentation associated with the 1337list project.☆396Jun 14, 2018Updated 8 years ago
- Wiki to collect Red Team infrastructure hardening resources☆4,512Oct 1, 2025Updated 10 months ago
- Powershell-based Windows Security Auditing Toolbox☆571Jan 9, 2019Updated 7 years ago
- Active Directory Assessment and Privilege Escalation Script☆1,125Dec 7, 2022Updated 3 years ago
- All related files and slides for past talks☆46Dec 14, 2025Updated 7 months ago
- A fully functional DanderSpritz lab in 2 commands☆450May 16, 2019Updated 7 years ago
- ☆98May 3, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and man…☆301Apr 24, 2020Updated 6 years ago
- This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.☆10,612May 7, 2026Updated 3 months ago
- Test Blue Team detections without running any attack.☆271May 2, 2024Updated 2 years ago
- A collection of curated Java Deserialization Exploits☆593May 16, 2021Updated 5 years ago
- ☆351Mar 19, 2021Updated 5 years ago
- Extract stored credentials from Internet Explorer and Edge☆323Sep 15, 2020Updated 5 years ago
- Robber is open source tool for finding executables prone to DLL hijacking☆798Jul 8, 2026Updated last month
- Personal compilation of APT malware from whitepaper releases, documents and own research☆261Feb 7, 2019Updated 7 years ago
- The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samp…☆747Dec 11, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆71Aug 31, 2020Updated 5 years ago
- Web Security Technology & Vulnerability Analysis Whitepapers☆548Jan 1, 2019Updated 7 years ago
- Various PowerShell scripts that may be useful during red team exercise☆965Apr 28, 2022Updated 4 years ago
- nmap模块扫描端口服务后，调用对应的exp检测☆12Jun 9, 2018Updated 8 years ago
- a parser + crawler for .DS_Store files exposed publically☆56Jun 6, 2023Updated 3 years ago
- Abusing Exchange via EWS☆151Sep 14, 2020Updated 5 years ago
- Red Team Tool Kit☆1,131Dec 8, 2022Updated 3 years ago