A compilation of important commands, files, and tools used in Pentesting
☆56Jan 17, 2023Updated 3 years ago
Alternatives and similar repositories for Offensive-Security-Cheat-Sheet
Users that are interested in Offensive-Security-Cheat-Sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux and windows privilege escalation cheatsheet☆12May 18, 2023Updated 3 years ago
- Offensive Security OSWE Prep 2022☆75Sep 10, 2022Updated 3 years ago
- Offensive Security Vault structure for Obsidian☆25Jan 9, 2023Updated 3 years ago
- Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…☆15May 30, 2026Updated 3 months ago
- Security Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF☆35Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆505Oct 7, 2022Updated 3 years ago
- Penetration Testing & Red Team tools & scripts☆12Sep 22, 2023Updated 2 years ago
- My journey and notes on learning Offensive Security from the ground up☆21Dec 22, 2025Updated 8 months ago
- Web Hacking and Red Teaming MindMap☆81Dec 24, 2025Updated 8 months ago
- Scripts and piece of codes used for Active Directory configuration☆84Feb 14, 2023Updated 3 years ago
- rShellZ s a linux reverse-shell & exploitation assistance framework. With lots of payload and post exploitation modules.☆13Dec 13, 2023Updated 2 years ago
- A PlayBook for OSWP & Wireless Pentest☆54Jul 28, 2024Updated 2 years ago
- List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.☆454Mar 16, 2026Updated 5 months ago
- Red Teaming & Active Directory Cheat Sheet.☆42Sep 21, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Active Directory forensic framework☆16May 18, 2026Updated 3 months ago
- An advanced scanner for exposed secrets in web pages, APIs, and source code.☆14Apr 22, 2025Updated last year
- A simple pentest container equipped with common python pentest tools.☆44Jan 30, 2026Updated 7 months ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Scanner for Log4j RCE CVE-2021-44228☆11Jul 6, 2022Updated 4 years ago
- ☆203Mar 11, 2024Updated 2 years ago
- A vSphere deployment of GOADv2 BETA Testing (v0.1)☆26Dec 22, 2023Updated 2 years ago
- offensive security scripts and documentation☆30Mar 9, 2026Updated 5 months ago
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆21Apr 16, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Powershell Scripts for Blue Team members☆11Dec 1, 2023Updated 2 years ago
- Repository with quick triggers to help during Pentest in an Active Directory environment.☆50Jul 28, 2025Updated last year
- IOCTL-Flooder is a verbose tool designed to help with Windows driver fuzzing by brute forcing IOCTLs on loaded drivers. GetLastError is u…☆10Aug 21, 2018Updated 8 years ago
- Apache Superset Auth Bypass (CVE-2023-27524)☆11May 9, 2023Updated 3 years ago
- ☆28Mar 31, 2023Updated 3 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- HTB recon tool to simplify part of the enumeration process☆14May 14, 2025Updated last year
- Distributed phishing framework designed to streamline offensive security phishing☆40Feb 16, 2023Updated 3 years ago
- Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool☆932Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Commands used in Windows penetration tests☆53Jan 19, 2026Updated 7 months ago
- OSCP Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines☆1,102Mar 23, 2026Updated 5 months ago
- ☆32Mar 21, 2023Updated 3 years ago
- Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.☆20Feb 2, 2024Updated 2 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- ☆11Apr 20, 2025Updated last year