This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
☆53Mar 2, 2020Updated 6 years ago
Alternatives and similar repositories for my-pentesting-repo
Users that are interested in my-pentesting-repo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools and resources for web app hacking. The payloads.txt documents are a must have for your Burpsuite intruder payload armory. They've h…☆28Jun 10, 2019Updated 7 years ago
- Repository for the SecurityTube Linux Assembly Expert Certification☆10Oct 11, 2017Updated 9 years ago
- A combined wordlists for files and directory discovery☆133May 3, 2021Updated 5 years ago
- A curated list of amazingly bug bounty tips from security researchers around the world.☆108Mar 14, 2019Updated 7 years ago
- A quick reference script that can easily display reverse shells for different languages.☆20May 28, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆23Aug 1, 2020Updated 6 years ago
- Wax is a mediocre fuzzer I'm prototyping to test some ideas and get rid of others.☆17Jul 12, 2018Updated 8 years ago
- ☆27Feb 7, 2023Updated 3 years ago
- ☆61Sep 10, 2019Updated 7 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- My collection of exploit development skeletons for fuzzing, overwriting the stack, remote code execution, etc.☆16Mar 19, 2025Updated last year
- Automatically exported from code.google.com/p/browsersec☆11Jul 7, 2015Updated 11 years ago
- ☆17Aug 3, 2021Updated 5 years ago
- Burp-Addons : Some of Burp Addons I use ( Mindak ak fahem )☆12Sep 1, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An enumeration and exploitation toolkit using RFC calls to SAP☆41Jan 8, 2020Updated 6 years ago
- -☆11Nov 21, 2020Updated 5 years ago
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆11Oct 7, 2026Updated 3 weeks ago
- ☆13Jul 27, 2020Updated 6 years ago
- A playground to practice SSRF Attacks against web apps☆17Oct 15, 2018Updated 8 years ago
- Linux Local Privesc Helper and Agent☆165Dec 2, 2019Updated 6 years ago
- ☆14Nov 29, 2019Updated 6 years ago
- Alphanumeric Encoder☆25Oct 10, 2018Updated 8 years ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Slap the hell outta GitHub by harvesting emails by crunching through commits. The Dope OSINT tool.☆13Aug 17, 2018Updated 8 years ago
- Scripts I used during CTP☆68Jul 11, 2020Updated 6 years ago
- A list to discover work of red team tooling and methodology for penetration testing and security assessment☆75Mar 8, 2019Updated 7 years ago
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 7 years ago
- JWT_Brute☆31Oct 10, 2019Updated 7 years ago
- Collection of Bug Bounty Tips☆65Dec 10, 2019Updated 6 years ago
- Retrive the status codes from a list of URLs☆33May 18, 2020Updated 6 years ago
- Automatically spin up infra for phishing☆63Feb 1, 2020Updated 6 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- ☆25May 30, 2017Updated 9 years ago
- Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.☆753Apr 12, 2022Updated 4 years ago
- Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.☆32Sep 20, 2020Updated 6 years ago
- A tools for JavaScript Recon☆24Jul 25, 2020Updated 6 years ago
- ☆25Jan 18, 2015Updated 11 years ago
- LFI/RFI scanner by Iman Karim (fimap.dev@gmail.com)☆10Jul 3, 2015Updated 11 years ago