A comprehensive, step-by-step penetration testing checklist for ethical hackers. Covers pre-engagement, information gathering, analysis, exploitation, reporting, and more. Ideal for both beginners and pros.
☆142Nov 19, 2024Updated last year
Alternatives and similar repositories for awesome-pentest-checklist
Users that are interested in awesome-pentest-checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A OWASP Based Checklist With 500+ Test Cases☆912Oct 26, 2022Updated 3 years ago
- CORS Exploit POC for WordPress REST API☆10Oct 27, 2024Updated last year
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆18Mar 31, 2026Updated 3 months ago
- Monitors and curates bug-bounty related repositories weekly (Monday).☆22Updated this week
- Enhance your Google account security with this comprehensive guide. It covers strong passwords, two-factor authentication, phishing preve…☆11Nov 21, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A tool to generate fake profile for filling of form☆12Apr 30, 2023Updated 3 years ago
- RedTeam - Red Team Tools☆52Oct 30, 2022Updated 3 years ago
- Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)☆12Sep 5, 2024Updated last year
- An ongoing collection of awesome ethical hacking tools, software, libraries, learning tutorials, frameworks, academic and practical resou…☆43Feb 24, 2023Updated 3 years ago
- This repository contains a roadmap for preparing for the EJPTv2 exam.☆198Dec 27, 2024Updated last year
- OSCP Methodology☆59Sep 6, 2023Updated 2 years ago
- All-Army CyberStakes 4 Challenge Write-ups and Walk-throughs☆22May 12, 2020Updated 6 years ago
- These are the scripts & methodologies that can be used in Buffer Over Flow Fuzzing and Exploitation☆18Oct 3, 2021Updated 4 years ago
- Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, sing…☆56Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- the leaked prompts from the best performing gpts☆18Feb 23, 2024Updated 2 years ago
- Obsidian Templates for OSCP, CPTS, and Training labs☆125May 22, 2026Updated 2 months ago
- An open source tool for scrapping fresh and usable proxies. Supports HTTP, SOCKS4, SOCKS5☆16Nov 7, 2024Updated last year
- Google Custom Search Engine for search in 10 worldwide webcams catalogs☆30Mar 25, 2024Updated 2 years ago
- A comprehensive guide to using AI technologies safely while protecting your privacy. Covers self-hosted solutions, popular AI services, b…☆48May 1, 2025Updated last year
- Pentest report writing guide☆20Apr 15, 2026Updated 3 months ago
- CHEAT SHEET DE SEGURIDAD PARA ETHICAL HACKING & PENETRATION TESTING☆34Jan 5, 2017Updated 9 years ago
- ☆11May 17, 2025Updated last year
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆25Dec 1, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆13Jan 17, 2025Updated last year
- This repo offers notes and resources on ethical hacking, covering information gathering, scanning, web hacking, exploitation, and Windows…☆225Apr 5, 2025Updated last year
- ☆14Nov 18, 2021Updated 4 years ago
- Sample Vulnerable and Secure Code Snippets for Various Vulnerabilities☆25Jun 18, 2024Updated 2 years ago
- A QoL tool to obfuscate shellcode.☆26Jun 2, 2026Updated last month
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆19Updated this week
- Fire-AV is a collection of lists that you can use to block av providers and bad ips☆24Updated this week
- Bitrix vulnerability scanner☆24Mar 28, 2023Updated 3 years ago
- #100DaysOfCloud #100DaysOfCyberSecurity snippets starting from 28 SEPT 2022☆15Oct 17, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11Jan 9, 2019Updated 7 years ago
- ohmyzsh theme to match HTB PwnBox shell☆13Mar 26, 2023Updated 3 years ago
- All WriteUps and Flags of TryHackMe☆15Nov 24, 2020Updated 5 years ago
- A Quick Way To Install Operating Systems And Other Programs On Termux Without Typing 1000 Commands // Comes With A Nice GUI☆18May 7, 2021Updated 5 years ago
- CorsOne - Advanced CORS Misconfiguration Scanner☆29May 27, 2026Updated 2 months ago
- Collection of hacking tools, and ideas you might need to practice ethical hacking.☆30Apr 29, 2022Updated 4 years ago
- Anyone who has used Burp Suite Repeater for more than 20 minutes knows the problem. You send request after request, and every tab is name…☆18Jun 8, 2026Updated last month