Tips for Penetration Testing
☆175Mar 26, 2026Updated 7 months ago
Alternatives and similar repositories for Pentest-Hints
Users that are interested in Pentest-Hints are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python for Security : Basic Python Security Code Samples☆22Dec 14, 2017Updated 8 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Jul 25, 2026Updated 3 months ago
- Joomla login bruteforce☆141Jul 18, 2024Updated 2 years ago
- My bug bounty notes☆35Apr 10, 2021Updated 5 years ago
- OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes.☆14Jan 20, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Nov 2, 2024Updated 2 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- Writeups for Vulnhub, Tryhackme and Others☆13Jun 25, 2023Updated 3 years ago
- Some wordlists collected form github to all bug bounty hunters.☆52Jul 30, 2021Updated 5 years ago
- Tools and resources for web app hacking. The payloads.txt documents are a must have for your Burpsuite intruder payload armory. They've h…☆28Jun 10, 2019Updated 7 years ago
- A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.☆91Nov 25, 2020Updated 5 years ago
- Here is a collection of misc malicious PHP code I find on infected web servers. The file names mean nothing as they are usually randomly …☆11Feb 2, 2016Updated 10 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆29Jan 6, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Small tool to scan On-Premises Exchange servers, useful for analytical purposes and patch management☆21Aug 28, 2022Updated 4 years ago
- A comprehensive reconnaissance and vulnerability scanning tool that combines multiple security assessment capabilities into a single auto…☆26Jun 24, 2025Updated last year
- Match and Replace script used to automatically generate JSON option file to BurpSuite☆211May 13, 2019Updated 7 years ago
- STMCTF17 Writeups☆36Nov 8, 2017Updated 8 years ago
- 10 Reset Password Flaws Based on Web Application Security☆11Oct 19, 2020Updated 6 years ago
- Repository contains an online education portal filled with web vulnerabilities.☆21Jan 3, 2020Updated 6 years ago
- OSWE Preparation☆689Jul 25, 2022Updated 4 years ago
- stmctf22☆34Nov 16, 2022Updated 3 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Captchasec is a captcha difficulty tester. It uses de-captcher.com as an OCR server.☆27Nov 18, 2023Updated 2 years ago
- Collection of tips, tools and tutorials around infosec☆29May 18, 2017Updated 9 years ago
- Simple shellcode injector.☆13Jan 6, 2019Updated 7 years ago
- I use all of scripts in this repository daily and schedule them to control my systems. Also, it includes all of my penetration tests scri…☆30Jun 26, 2022Updated 4 years ago
- Windows Privilege Escalation☆30Aug 14, 2020Updated 6 years ago
- Penetration Testing with Kali Linux☆22Oct 18, 2019Updated 7 years ago
- Cheat Sheets, Metodologies etc.☆19Apr 12, 2019Updated 7 years ago
- DO NOT USE: this is a vulnerable ASP.NET web app using Razor templating engine. The vulnerability is a Server-Side Template Injection (SS…☆29Aug 22, 2020Updated 6 years ago
- eLearnSecurity Web application Penetration Tester eXtreme (eWPTXv2)☆29Feb 6, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Penetration tests guide based on OWASP including test cases, resources and examples.☆2,853Mar 23, 2022Updated 4 years ago
- Local file inclusion exploitation tool☆1,007May 19, 2026Updated 5 months ago
- A set of recipes useful in pentesting and red teaming scenarios☆148Jul 7, 2023Updated 3 years ago
- Penetration Testing Methodology - short notes☆11May 30, 2015Updated 11 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- improving...☆277Oct 14, 2025Updated last year
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆799Aug 21, 2023Updated 3 years ago