Alternatives and similar repositories for pentest

Users that are interested in pentest are comparing it to the libraries listed below

• Leoid / NonPublishedExploits

  View on GitHub
  A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs
  ☆10Nov 29, 2020Updated 5 years ago
• LuNiZz / awesome

  View on GitHub
  😎 Awesome lists about all kinds of interesting topics
  ☆49May 18, 2020Updated 5 years ago
• iamthefrogy / bucketbunny

  View on GitHub
  AWS S3 open bucket poc automated script.
  ☆57Aug 23, 2021Updated 4 years ago
• mrnitesh / WSDL

  View on GitHub
  It contain google dork to find the wsdl file.
  ☆13May 27, 2020Updated 5 years ago
• m2sup3rn0va / SiAAA

  View on GitHub
  Small wiki for Mobile Application Penetration Testing Tools
  ☆12Apr 8, 2021Updated 4 years ago
• dreamer1eh / ultimate_bughunter_tools

  View on GitHub
  Ultimate Package Of 50 Bug Bounty Hunting Tools
  ☆47Oct 3, 2025Updated 4 months ago
• e11i0t4lders0n / Bugbounty-Resources

  View on GitHub
  ☆87May 27, 2021Updated 4 years ago
• winsecurity / CheatSheets

  View on GitHub
  ☆32Aug 12, 2021Updated 4 years ago
• MustafaSky / Guide-to-SSRF

  View on GitHub
  Guide to SSRF
  ☆74Oct 10, 2023Updated 2 years ago
• xElkomy / Workflow-Bug-Bounty

  View on GitHub
  My Tools For Bug Bounty
  ☆69Sep 23, 2024Updated last year
• skilincer / CyberSource

  View on GitHub
  ☆13May 8, 2019Updated 6 years ago
• cfalta / PowerShellArmoury

  View on GitHub
  A PowerShell armoury for security guys and girls
  ☆468Jan 23, 2024Updated 2 years ago
• ethicalhackingplayground / crlfmap

  View on GitHub
  CRLFMap is a tool to find HTTP Splitting vulnerabilities
  ☆25Jul 31, 2020Updated 5 years ago
• Alh4zr3d / OffensiveNim

  View on GitHub
  My experiments in weaponizing Nim (https://nim-lang.org/)
  ☆14Nov 30, 2021Updated 4 years ago
• bleedx-93 / Spoofi

  View on GitHub
  A simple tool to inject shellcode into the remote process with the ability to spoof parent process.
  ☆16Mar 18, 2021Updated 4 years ago
• hahwul / XSS-Payload-without-Anything

  View on GitHub
  XSS Payload without Anything.
  ☆104Jun 28, 2019Updated 6 years ago
• dwisiswant0 / hinject

  View on GitHub
  Host Header Injection Checker
  ☆84Mar 2, 2022Updated 3 years ago
• LuemmelSec / Pentest-Tools-Collection

  View on GitHub
  ☆843Jan 12, 2026Updated last month
• imran-parray / Web-Sec-CheatSheet

  View on GitHub
  ☆240Jun 10, 2021Updated 4 years ago
• purabparihar / Infrastructure-Pentesting-Checklist

  View on GitHub
  ☆138Jul 9, 2021Updated 4 years ago
• Und3rf10w / CobaltStrikeBOFs

  View on GitHub
  Beacon Object Files used for Cobalt Strike
  ☆19Jul 18, 2023Updated 2 years ago
• byt3hx / gup

  View on GitHub
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆18Dec 4, 2021Updated 4 years ago
• Santandersecurityresearch / corsair_scan

  View on GitHub
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆123Apr 14, 2023Updated 2 years ago
• Fearless523 / Buffer-Overflow

  View on GitHub
  A Buffer Overflow checklist, with plug-and-play pre-written python scripts.
  ☆33Aug 18, 2021Updated 4 years ago
• joker2a / OSCP

  View on GitHub
  OSCP cheatsheet
  ☆106Jan 11, 2024Updated 2 years ago
• BC-SECURITY / Empire-Cli

  View on GitHub
  CLI Frontend for PowerShell Empire.
  ☆49Jun 26, 2021Updated 4 years ago
• justmorpheus / burp-automation

  View on GitHub
  Performing automated scan using Burp Suite Pro & Vmware Burp Rest API
  ☆52Sep 30, 2022Updated 3 years ago
• Aetsu / OffensivePipeline

  View on GitHub
  OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…
  ☆819Oct 27, 2023Updated 2 years ago
• ccelikanil / Cheat-Sheets

  View on GitHub
  ☆29May 8, 2021Updated 4 years ago
• novanazizr / BugBountyHunting

  View on GitHub
  Some Tutorials and Things to Help Bug Hunter
  ☆31Mar 17, 2021Updated 4 years ago
• emadshanab / VOIP-Pentesting-checklist-Cheatsheet-Tools

  View on GitHub
  ☆55Jun 9, 2021Updated 4 years ago
• Michaeladsl / Patronusx

  View on GitHub
  ☆54Jan 21, 2025Updated last year
• attacker-codeninja / 100DaysToLearnandImprove

  View on GitHub
  My notes of Day1 Day2 will be posted here as journey
  ☆17Jan 6, 2021Updated 5 years ago
• dafthack / CloudPentestCheatsheets

  View on GitHub
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…
  ☆2,804Sep 17, 2024Updated last year
• ethicalhackingplayground / tprox

  View on GitHub
  TProx is a fast reverse proxy path traversal detector and directory bruteforcer.
  ☆30Sep 16, 2021Updated 4 years ago
• ethicalhackingplayground / ssrf-tool

  View on GitHub
  ☆145Jul 25, 2022Updated 3 years ago
• PortSwigger / psycho-path

  View on GitHub
  psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…
  ☆19Jun 28, 2018Updated 7 years ago
• o1mate / AppLocker-Bypass

  View on GitHub
  Bypassing AppLocker with C#
  ☆144Jul 7, 2021Updated 4 years ago
• geeknik / nuclei-template-generator

  View on GitHub
  A simple tool which makes creating nuclei templates even easier.
  ☆36Jun 23, 2024Updated last year