Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
☆2,178Oct 16, 2026Updated 2 weeks ago
Alternatives and similar repositories for PentestingEverything
Users that are interested in PentestingEverything are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,656Feb 10, 2024Updated 2 years ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,528Updated this week
- Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.☆749Oct 16, 2026Updated 2 weeks ago
- Tools and Techniques for Red Team / Penetration Testing☆9,907Apr 18, 2026Updated 6 months ago
- Cybersecurity oriented awesome list☆4,257Oct 26, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for id…☆1,984Sep 11, 2025Updated last year
- OSWE, OSEP, OSED, OSEE☆3,903Jan 2, 2026Updated 10 months ago
- Top disclosed reports from HackerOne☆6,647Oct 12, 2026Updated 3 weeks ago
- List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting p…☆1,045Aug 17, 2026Updated 2 months ago
- HackTheBox Certified Penetration Tester Specialist Cheatsheet☆846Jul 10, 2024Updated 2 years ago
- All about bug bounty (bypasses, payloads, and etc)☆6,955Sep 8, 2023Updated 3 years ago
- A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.☆4,163Oct 23, 2026Updated last week
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆3,230Oct 26, 2026Updated last week
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆487Oct 14, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆123Sep 16, 2026Updated last month
- Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.☆1,546Aug 14, 2026Updated 2 months ago
- Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. …☆1,396Dec 28, 2025Updated 10 months ago
- AI-powered ffuf wrapper☆812Dec 4, 2025Updated 10 months ago
- This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structur…☆9,409Jul 21, 2026Updated 3 months ago
- Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, d…☆487Oct 20, 2024Updated 2 years ago
- Collection of methodology and test case for various web vulnerabilities.☆7,378Oct 22, 2026Updated last week
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,862Apr 17, 2026Updated 6 months ago
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆6,175Aug 6, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- AI/ML Pentesting Roadmap for Beginners☆820Oct 22, 2026Updated last week
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,323Sep 1, 2026Updated 2 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,365Updated this week
- OSCP Cheat Sheet☆3,871Oct 22, 2026Updated last week
- HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity to…☆13,302Aug 3, 2026Updated 2 months ago
- An insane list of all dorks taken from everywhere from various different sources.☆832Dec 29, 2025Updated 10 months ago
- A fast WordPress plugin enumeration tool☆971Oct 26, 2026Updated last week
- A list of open source web security scanners☆1,623Apr 29, 2025Updated last year
- NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive securi…☆1,499Oct 19, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Header Exploitation HTTP☆765Sep 6, 2026Updated last month
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆466Oct 3, 2026Updated 3 weeks ago
- A curated list of various bug bounty tools☆6,446Updated this week
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆10,173Oct 12, 2026Updated 3 weeks ago
- Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can repla…☆1,793Updated this week
- AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool☆1,574Feb 2, 2026Updated 9 months ago
- A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting☆1,920Sep 29, 2025Updated last year