Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.
☆90Sep 16, 2026Updated last month
Alternatives and similar repositories for PentestingChecklist
Users that are interested in PentestingChecklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- AWS services enumerator for penetration testing☆21Nov 11, 2025Updated 11 months ago
- Portable passive hostname reconnaissance through Shodan CTL☆42Nov 1, 2026Updated last week
- A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.☆39Oct 31, 2026Updated last week
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆66Oct 16, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Fully local vulnerability research pipeline - 14B code-specialized LLM reviews every source file exhaustively.☆174Sep 5, 2026Updated 2 months ago
- Offensive security lab simulating reverse-shell C2 activity and analyzing network vs. SIEM detection gaps.☆21Sep 19, 2026Updated last month
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,329Updated this week
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated 11 months ago
- A collection of skills, agents, commands, and workflows for security researchers. Compatible with Claude Code, Claude Desktop, OpenCode, …☆108Apr 19, 2026Updated 6 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 6 months ago
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆42Updated this week
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆23Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution (RCE) conditions.☆12Jul 8, 2026Updated 3 months ago
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆72Jul 27, 2026Updated 3 months ago
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆82Sep 10, 2026Updated last month
- This is the report that goes with my mock full-scope red team engagement against Game of Active Directory.☆19Oct 26, 2025Updated last year
- ☆14Jun 9, 2026Updated 4 months ago
- A vulnerable reverse proxy that reflects real world findings and novel research.☆20Aug 20, 2026Updated 2 months ago
- Hackers Cookbook - Tons of hacker cli recipes ready to search and use when you need them☆68Oct 23, 2026Updated 2 weeks ago
- Autonomous AI pentesting daemon — 34 security tools, 15 vuln classes, WAF bypass engine, LLM analysis. Free tier models (<$3/mo). HackerO…☆84Aug 7, 2026Updated 3 months ago
- Lightweight OSINT reconnaissance tool with web UI for bug bounty hunters and pentesters☆12Jan 6, 2026Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆408Oct 17, 2026Updated 3 weeks ago
- Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.☆66Mar 2, 2026Updated 8 months ago
- A x64 binary packer written in Rust.☆34Jul 30, 2026Updated 3 months ago
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆340Sep 1, 2026Updated 2 months ago
- Open Source Risk Assessment Tool for Power Platform☆12Oct 1, 2026Updated last month
- Decrypt VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram from the VM password, and flatten the .vmem to a Volatility-ready image.☆55Jul 4, 2026Updated 4 months ago
- Harness fo malware analysis☆43Aug 23, 2026Updated 2 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | …☆2,261Oct 16, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Pass-the-Passkey Family of Attacks☆234Sep 14, 2026Updated last month
- ☆21Sep 2, 2026Updated 2 months ago
- ☆12Apr 26, 2025Updated last year
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆466Oct 3, 2026Updated last month
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆110Sep 25, 2026Updated last month
- Attack techniques for threat emulation in VMware environments☆58Updated this week
- Inject RDPThief into memory with PowerShell.☆67Jan 21, 2025Updated last year