Tools that can be useful for OSEP exam and PEN300 studies.
☆98Mar 14, 2026Updated 7 months ago
Alternatives and similar repositories for OSEP
Users that are interested in OSEP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerShell script to automate enabling RDP, local admin user creation, and configuring firewall rules for RDP access.☆53Sep 4, 2026Updated last month
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- Bash wrapper for NetExec to quickly validate compromised credentials across SMB, WinRM, RDP, MSSQL, and FTP☆98May 1, 2026Updated 6 months ago
- BloodHound MCP Server☆13Apr 8, 2026Updated 6 months ago
- A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.☆517Oct 8, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆94Aug 5, 2026Updated 2 months ago
- Free Windows privilege escalation lab inspired by HTB Devel, built for PNPT and OSCP practice.☆25Jan 13, 2026Updated 9 months ago
- Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317☆15Dec 10, 2025Updated 10 months ago
- Simple bash script to spray known credentials against multiple services with netexec☆133Jan 16, 2026Updated 9 months ago
- A cheatsheet for NetExec☆213Jun 9, 2025Updated last year
- Dominate Active Directory with PowerShell.☆1,207Sep 17, 2026Updated last month
- The only OSCP preparation repository you need: notes, tooling, reporting, prep-list, methodology, and security resources.☆57Jun 13, 2026Updated 4 months ago
- The different ways to dump lsass☆290Jul 19, 2026Updated 3 months ago
- ☆26Sep 5, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This project documents my hands-on journey in learning and conducting internal Active Directory (AD) penetration testing. The exercises s…☆22Apr 19, 2025Updated last year
- Generate obfuscated PowerShell commands using XOR logic with random keys!☆12Apr 7, 2025Updated last year
- Active Directory information dumper via ADWS for evasion purposes.☆324Oct 12, 2026Updated 3 weeks ago
- HTML parser for PEAS output with additional features☆164Jun 29, 2026Updated 4 months ago
- ExchangeHound is a defensive BloodHound OpenGraph collector for on-prem Microsoft Exchange that maps mailbox delegation and Exchange priv…☆77Apr 17, 2026Updated 6 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆501Oct 26, 2026Updated last week
- Everything from my OSEP study.☆202Jan 4, 2026Updated 9 months ago
- Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, passwor…☆783Updated this week
- bash script to automate the penetration test☆22Aug 20, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A marriage between Octoberfest7/OSEP-Tools and chvancooten/OSEP-Code-Snippets with some improvements/additions☆122Jan 3, 2026Updated 9 months ago
- In-target C# post-exploitation and exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any dep…☆81Oct 11, 2026Updated 3 weeks ago
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆72Jul 27, 2026Updated 3 months ago
- A collection of useful tools and scripts were developed and gathered throughout the Offensive Security's PEN-300 (OSEP) course.☆364Aug 9, 2025Updated last year
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆845May 16, 2026Updated 5 months ago
- Payload Generation Framework☆22Oct 24, 2024Updated 2 years ago
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆40Oct 17, 2026Updated 2 weeks ago
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Entra ID user enumeration and auth method discovery via the public GetCredentialType API☆178Sep 29, 2026Updated last month
- An AI CTF challenges to learn some of the risks that AI Chatbots pose☆76Sep 20, 2026Updated last month
- OSCP Cheatsheet☆19Jun 14, 2023Updated 3 years ago
- Pick is a lightweight, headless penetration testing agent built with Dioxus, providing network reconnaissance, device discovery, and remo…☆37Updated this week
- ☆92Sep 19, 2026Updated last month
- Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.☆290Aug 12, 2026Updated 2 months ago
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year