Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
☆2,061Sep 1, 2026Updated this week
Alternatives and similar repositories for PentestingEverything
Users that are interested in PentestingEverything are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.☆740Updated this week
- Cybersecurity oriented awesome list☆4,087Updated this week
- Tools and Techniques for Red Team / Penetration Testing☆9,679Apr 18, 2026Updated 4 months ago
- HackTheBox Certified Penetration Tester Specialist Cheatsheet☆802Jul 10, 2024Updated 2 years ago
- Top disclosed reports from HackerOne☆6,507Aug 17, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆4,668Updated this week
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,635Feb 10, 2024Updated 2 years ago
- AI-powered ffuf wrapper☆804Dec 4, 2025Updated 8 months ago
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆3,017Updated this week
- List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting p…☆998Aug 17, 2026Updated 2 weeks ago
- OSWE, OSEP, OSED, OSEE☆3,890Jan 2, 2026Updated 8 months ago
- A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.☆4,081Updated this week
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆3,038Updated this week
- A list of open source web security scanners☆1,615Apr 29, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, d…☆473Oct 20, 2024Updated last year
- A fast WordPress plugin enumeration tool☆941Aug 25, 2026Updated last week
- Header Exploitation HTTP☆762Aug 26, 2026Updated last week
- A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for id…☆1,848Sep 11, 2025Updated 11 months ago
- Cybersecurity AI (CAI), the framework for AI Security☆9,820Aug 22, 2026Updated last week
- Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.☆1,340Aug 14, 2026Updated 2 weeks ago
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,897Sep 29, 2025Updated 11 months ago
- Bug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More☆660Oct 27, 2025Updated 10 months ago
- Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.☆1,378Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- The Ultimate Information Gathering Toolkit☆4,097Dec 10, 2025Updated 8 months ago
- NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive securi…☆1,361Updated this week
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆117Jul 3, 2026Updated last month
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,864Apr 17, 2026Updated 4 months ago
- Search for all leaked keys/secrets using one regex! bugbounty☆242Mar 29, 2025Updated last year
- API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).☆327Aug 26, 2026Updated last week
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆110Nov 24, 2025Updated 9 months ago
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆393Jul 5, 2026Updated last month
- Complete Roadmap for Penetration Testing☆312Jul 25, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- All about bug bounty (bypasses, payloads, and etc)☆6,845Sep 8, 2023Updated 2 years ago
- ☆1,174Jan 28, 2026Updated 7 months ago
- AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool☆1,514Feb 2, 2026Updated 7 months ago
- Intentionally Vulnerable Hacking Labs☆604Updated this week
- JWT Auditor – Analyze, break, and understand your tokens like a pro.☆591Jul 11, 2026Updated last month
- AI/ML Pentesting Roadmap for Beginners☆759Aug 4, 2026Updated 3 weeks ago
- Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestra…☆1,867Jun 27, 2026Updated 2 months ago