A comprehensive, step-by-step penetration testing checklist for ethical hackers. Covers pre-engagement, information gathering, analysis, exploitation, reporting, and more. Ideal for both beginners and pros.
☆152Nov 19, 2024Updated last year
Alternatives and similar repositories for awesome-pentest-checklist
Users that are interested in awesome-pentest-checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A penetration test reporting tool☆10Mar 8, 2023Updated 3 years ago
- A OWASP Based Checklist With 500+ Test Cases☆921Oct 26, 2022Updated 3 years ago
- Excel parser for various pentesting tools.☆32Jun 13, 2023Updated 3 years ago
- A Checklist for Offsec PEN-200 EXAM OSCP+ 2024☆76Oct 31, 2024Updated last year
- Pentest report framework without data send☆20Sep 23, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆19Mar 31, 2026Updated 5 months ago
- Enhance your Google account security with this comprehensive guide. It covers strong passwords, two-factor authentication, phishing preve…☆11Nov 21, 2024Updated last year
- checklist for testing the web applications☆296Feb 25, 2023Updated 3 years ago
- RedTeam - Red Team Tools☆53Oct 30, 2022Updated 3 years ago
- Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)☆12Sep 5, 2024Updated 2 years ago
- Collection of cheat sheets useful for pentesting☆706Jun 27, 2024Updated 2 years ago
- OSCP Methodology☆59Sep 6, 2023Updated 3 years ago
- An insightful collection of my favorite podcasts focusing on privacy, cybersecurity, and digital rights. Explore various perspectives on …☆22Nov 21, 2024Updated last year
- list of resource about low level dev☆20Nov 15, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- These are the scripts & methodologies that can be used in Buffer Over Flow Fuzzing and Exploitation☆18Oct 3, 2021Updated 4 years ago
- the leaked prompts from the best performing gpts☆18Feb 23, 2024Updated 2 years ago
- Obsidian Templates for OSCP, CPTS, and Training labs☆130May 22, 2026Updated 4 months ago
- A collection of Windows x32 exploits created while preparing for the OSED certification exam☆28Jun 29, 2021Updated 5 years ago
- A comprehensive guide to using AI technologies safely while protecting your privacy. Covers self-hosted solutions, popular AI services, b…☆49May 1, 2025Updated last year
- ☆14Aug 9, 2021Updated 5 years ago
- The following repo holds all scripts, apps, and documentation for InfoSec Red Team related activities.☆19Jun 24, 2020Updated 6 years ago
- Work in progress...☆847Apr 29, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Pentest report writing guide☆20Apr 15, 2026Updated 5 months ago
- CHEAT SHEET DE SEGURIDAD PARA ETHICAL HACKING & PENETRATION TESTING☆35Jan 5, 2017Updated 9 years ago
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆25Dec 1, 2024Updated last year
- This repo offers notes and resources on ethical hacking, covering information gathering, scanning, web hacking, exploitation, and Windows…☆230Apr 5, 2025Updated last year
- ☆14Nov 18, 2021Updated 4 years ago
- Sample Vulnerable and Secure Code Snippets for Various Vulnerabilities☆25Sep 6, 2026Updated 3 weeks ago
- Detection Engineering Tools☆38Aug 19, 2026Updated last month
- Fire-AV is a collection of lists that you can use to block av providers and bad ips☆24Updated this week
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆21Jul 24, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆29Jun 17, 2024Updated 2 years ago
- Julia package for quantum circuit generation☆14Jan 22, 2022Updated 4 years ago
- You can gather useful information accounts by username across all types networks ( which also include social media)☆33Oct 19, 2023Updated 2 years ago
- ohmyzsh theme to match HTB PwnBox shell☆13Mar 26, 2023Updated 3 years ago
- Kali Nethunter for any android device since from kitkat and upper☆15Aug 10, 2017Updated 9 years ago
- A Production Tool for Embodied AI☆29Jul 8, 2024Updated 2 years ago
- A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks☆32Mar 17, 2026Updated 6 months ago