A comprehensive, step-by-step penetration testing checklist for ethical hackers. Covers pre-engagement, information gathering, analysis, exploitation, reporting, and more. Ideal for both beginners and pros.
☆149Nov 19, 2024Updated last year
Alternatives and similar repositories for awesome-pentest-checklist
Users that are interested in awesome-pentest-checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A penetration test reporting tool☆10Mar 8, 2023Updated 3 years ago
- A OWASP Based Checklist With 500+ Test Cases☆922Oct 26, 2022Updated 3 years ago
- C2 Framework - Advanced Red Team Tool☆22Jun 1, 2026Updated 3 months ago
- A Checklist for Offsec PEN-200 EXAM OSCP+ 2024☆76Oct 31, 2024Updated last year
- Pentest report framework without data send☆19Sep 23, 2025Updated 11 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆18Mar 31, 2026Updated 5 months ago
- Monitors and curates bug-bounty related repositories weekly (Monday).☆82Updated this week
- Enhance your Google account security with this comprehensive guide. It covers strong passwords, two-factor authentication, phishing preve…☆11Nov 21, 2024Updated last year
- Asset inventory of over 800 public bug bounty programs.☆12Jun 12, 2023Updated 3 years ago
- checklist for testing the web applications☆298Feb 25, 2023Updated 3 years ago
- A tool to generate fake profile for filling of form☆11Apr 30, 2023Updated 3 years ago
- Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)☆12Sep 5, 2024Updated 2 years ago
- Collection of cheat sheets useful for pentesting☆694Jun 27, 2024Updated 2 years ago
- OSCP Methodology☆60Sep 6, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- list of resource about low level dev☆21Nov 15, 2025Updated 9 months ago
- All-Army CyberStakes 4 Challenge Write-ups and Walk-throughs☆22May 12, 2020Updated 6 years ago
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- These are the scripts & methodologies that can be used in Buffer Over Flow Fuzzing and Exploitation☆18Oct 3, 2021Updated 4 years ago
- Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, sing…☆59Aug 8, 2026Updated last month
- Obsidian Templates for OSCP, CPTS, and Training labs☆128May 22, 2026Updated 3 months ago
- ☆14Aug 9, 2021Updated 5 years ago
- Work in progress...☆845Apr 29, 2026Updated 4 months ago
- CHEAT SHEET DE SEGURIDAD PARA ETHICAL HACKING & PENETRATION TESTING☆35Jan 5, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Jan 17, 2025Updated last year
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆25Dec 1, 2024Updated last year
- This repo offers notes and resources on ethical hacking, covering information gathering, scanning, web hacking, exploitation, and Windows…☆228Apr 5, 2025Updated last year
- ☆14Nov 18, 2021Updated 4 years ago
- A small utility to generate a word security report by using a knowledge base(XLSX).☆12Nov 25, 2023Updated 2 years ago
- This project focuses on static and dynamic malware analysis using REMnux and FlareVM. It involves setting up analysis environments on bot…☆23Jun 12, 2024Updated 2 years ago
- A QoL tool to obfuscate shellcode.☆28Jun 2, 2026Updated 3 months ago
- A curated list of resources, tools, and wordlists for bug bounty hunters.☆20Jul 24, 2026Updated last month
- Fire-AV is a collection of lists that you can use to block av providers and bad ips☆24Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆30Jun 17, 2024Updated 2 years ago
- ☆15Feb 20, 2026Updated 6 months ago
- Bitrix vulnerability scanner☆25Mar 28, 2023Updated 3 years ago
- Julia package for quantum circuit generation☆14Jan 22, 2022Updated 4 years ago
- Security training for the apps you actually ship. Open your browser and start hacking.☆42Updated this week
- You can gather useful information accounts by username across all types networks ( which also include social media)☆33Oct 19, 2023Updated 2 years ago
- ☆11Jan 9, 2019Updated 7 years ago