Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
☆1,682May 19, 2026Updated this week
Alternatives and similar repositories for PentestingEverything
Users that are interested in PentestingEverything are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,843Apr 17, 2026Updated last month
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,481Feb 10, 2024Updated 2 years ago
- A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for id…☆1,808Sep 11, 2025Updated 8 months ago
- API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).☆239Jan 25, 2026Updated 4 months ago
- OSWE, OSEP, OSED, OSEE☆3,825Jan 2, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.☆629Apr 26, 2026Updated 3 weeks ago
- SAST and DAST Scan Supported with 400 plus rules available for secrets and allow you add your own wordlist as well. lightweight source c…☆113Apr 26, 2026Updated 3 weeks ago
- Complete Roadmap for Penetration Testing☆281Sep 16, 2024Updated last year
- My Notes about Penetration Testing☆734Jan 17, 2026Updated 4 months ago
- Search for all leaked keys/secrets using one regex! bugbounty☆237Mar 29, 2025Updated last year
- ☆13Oct 24, 2024Updated last year
- All about bug bounty (bypasses, payloads, and etc)☆6,742Sep 8, 2023Updated 2 years ago
- AI-powered ffuf wrapper☆776Dec 4, 2025Updated 5 months ago
- Tools and Techniques for Red Team / Penetration Testing☆8,755Apr 18, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- PEN-300 collection to help you on your exam.☆712Feb 25, 2026Updated 2 months ago
- ☆705May 13, 2026Updated last week
- SubOwner - A Simple tool check for subdomain takeovers.☆118Oct 18, 2024Updated last year
- An insane list of all dorks taken from everywhere from various different sources.☆808Dec 29, 2025Updated 4 months ago
- Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, d…☆428Oct 20, 2024Updated last year
- Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. Th…☆266May 17, 2026Updated last week
- A comprehensive collection of resources, tools, tips, and guides for preparing and succeeding in the OSCP (Offensive Security Certified P…☆460Jun 23, 2025Updated 11 months ago
- HackTheBox Certified Penetration Tester Specialist Cheatsheet☆748Jul 10, 2024Updated last year
- OSCP Cheat Sheet☆3,735Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- how to look for Leaked Credentials !☆1,050May 6, 2024Updated 2 years ago
- Cybersecurity oriented awesome list☆3,688May 17, 2026Updated last week
- Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. …☆899Dec 28, 2025Updated 4 months ago
- ☆128Dec 17, 2024Updated last year
- GoogleDorker - Unleash the power of Google dorking for ethical hackers with custom search precision.☆281Dec 23, 2024Updated last year
- This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structur…☆8,885May 2, 2026Updated 3 weeks ago
- Collection of methodology and test case for various web vulnerabilities.☆7,114Jun 25, 2025Updated 11 months ago
- This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 …☆2,515Mar 14, 2026Updated 2 months ago
- ☆1,721Aug 19, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A curated list of various bug bounty tools☆5,992May 12, 2026Updated last week
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆5,856Aug 6, 2023Updated 2 years ago
- SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.☆193Mar 18, 2025Updated last year
- This Repositories contains list of One Liners with Descriptions and Installation requirements☆505Jun 28, 2025Updated 10 months ago
- Collection of Notes and CheatSheets used for Red teaming Certs☆497Feb 13, 2023Updated 3 years ago
- Top disclosed reports from HackerOne☆6,018May 16, 2026Updated last week
- Bypass-Four03 is a powerful bash tool designed to help testers bypass HTTP 403 forbidden errors through various path and header manipulat…☆210May 22, 2025Updated last year