Evidence-First Pentest Logger - Capture every command, find anything, prove everything.
☆37Jul 14, 2026Updated this week
Alternatives and similar repositories for pentlog
Users that are interested in pentlog are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open source CTF platform☆22Jun 21, 2026Updated 3 weeks ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Updated this week
- DursVuln - Nmap Scripting Engine (NSE)☆22Jul 16, 2025Updated last year
- Standardizing Security Titles☆25Apr 19, 2026Updated 2 months ago
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆97Apr 9, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Learning source code review, spot vulnerability, find some ways how to fix it.☆30Nov 17, 2022Updated 3 years ago
- An S3 account ID enumeration and bucket discovery tool☆21Mar 15, 2026Updated 4 months ago
- Web Application Attack☆14Dec 16, 2019Updated 6 years ago
- genAI agent providing security context, tooling for performing security analysis on CVE, components and more☆30Updated this week
- A better netcat for Hackers☆37May 29, 2026Updated last month
- A modern GoPhish fork with improved tracking accuracy and smarter detection.☆93Feb 16, 2026Updated 5 months ago
- Automatically run and populate a new instance of BH CE☆130Jan 30, 2026Updated 5 months ago
- Integrate GoKart security static analysis to GitHub Actions☆10Jan 11, 2023Updated 3 years ago
- Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs).☆189Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hackthebox tools☆13Mar 3, 2019Updated 7 years ago
- Technical Reference to multiple relay techniques☆190May 21, 2026Updated last month
- Multi-protocol credential validation tool with spray and no-spray modes for penetration testing.☆32Jun 1, 2026Updated last month
- CTFd plugin allowing for individual Docker containers per user or team☆11Oct 14, 2024Updated last year
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆32Feb 25, 2026Updated 4 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆134Updated this week
- The world's fastest Android/DEX decompiler meets radare2☆43Jun 25, 2026Updated 3 weeks ago
- Bring runZero Exposure Management into BloodHound☆48Apr 16, 2026Updated 3 months ago
- Avocado is a powerful C2 framework written in Python with stageless implants in Rust. Avocado's implant runs seamlessly on both Linux and…☆27Feb 15, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Tyche is a Mythic HTTPX Profile Generator used to create Malleable C2 Profiles.☆46Mar 28, 2026Updated 3 months ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated 10 months ago
- CTF write-ups RevID.CTF team☆18Sep 18, 2020Updated 5 years ago
- Spot all domain controllers in a Microsoft Active Directory environment. Find computer name, FQDN, and IP address(es) of all DCs.☆20Jun 23, 2024Updated 2 years ago
- Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform, to …☆263Updated this week
- Learn asm programming journey with code and path learn☆27Jul 18, 2022Updated 3 years ago
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- COLI (Command Orchestration & Logic Interface) – A visual orchestration layer for EWE, built for bug bounty automation. Create and run CL…☆34Oct 15, 2025Updated 9 months ago
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Autonomous Windows POC developer from patchwatch diff reports☆66May 13, 2026Updated 2 months ago
- Python-based static analyzer for Android APKs that extracts attack surface and flags high-risk vulnerability patterns with lightweight ta…☆60Feb 22, 2026Updated 4 months ago
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆34Jun 2, 2026Updated last month
- Detect Program Bug Bounty☆42Jun 12, 2025Updated last year
- A Ligolo-ng JavaScript agent working inside Chrome & Chromium-based browsers by leveraging Isolated Web Applications.☆134Mar 30, 2026Updated 3 months ago
- This repository is used to teach you how to exploit basic binary vulnerabilities.☆33Sep 2, 2019Updated 6 years ago
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆30Jul 25, 2023Updated 2 years ago