Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.
☆85Sep 16, 2026Updated last month
Alternatives and similar repositories for PentestingChecklist
Users that are interested in PentestingChecklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆299Updated this week
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week
- Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.☆60Aug 25, 2026Updated last month
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them te…☆737Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆488Feb 14, 2025Updated last year
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- AKCA Advanced Web Security Scanner☆238Oct 10, 2026Updated last week
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆211Aug 24, 2026Updated last month
- ☆92Aug 5, 2026Updated 2 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆162Oct 6, 2026Updated last week
- ☆83Sep 21, 2026Updated 3 weeks ago
- The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.☆512Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆422Oct 7, 2026Updated last week
- Certighost POC☆333Jul 28, 2026Updated 2 months ago
- Attack techniques for threat emulation in VMware environments☆55Aug 25, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized securi…☆160Aug 1, 2026Updated 2 months ago
- A curated collection of offensive, defensive and AI/LLM security tools.☆177Updated this week
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 2 weeks ago
- A series of leaks from hacker forums☆364Aug 18, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆452Updated this week
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated last month
- Repository for various Beacon Object Files (BOFs)☆119Updated this week
- Agentless, read-only security assessment for PowerShell 7: on-premises Active Directory, the Entra ID / Azure / Intune / Microsoft 365 id…☆81Updated this week
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- Redefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven press…☆232Updated this week
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated 3 weeks ago
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆57Sep 25, 2026Updated 3 weeks ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆151Aug 18, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆947Updated this week
- AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD…☆215Sep 25, 2026Updated 3 weeks ago
- Claude Code plugin that delegates reviews, rescue tasks, and session transfer to the Grok Build CLI☆263Aug 4, 2026Updated 2 months ago
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆38Updated this week