A collection of tools that I use in CTF's or for assessments
☆117Feb 2, 2025Updated last year
Alternatives and similar repositories for pentest-arsenal
Users that are interested in pentest-arsenal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repo for preparing for OSCE but to learn more about exploit development☆13Oct 7, 2020Updated 6 years ago
- This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations when it comes to …☆374Aug 14, 2024Updated 2 years ago
- List of Stuff I did to get through the OSCP :D☆391Dec 18, 2025Updated 10 months ago
- Generate AES128 and AES256 Kerberos keys from a given username, password, and realm☆18Sep 18, 2024Updated 2 years ago
- Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…☆80Nov 18, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repo for Windows x32-x64 Kernel/User Mode Exploitation writeups and exploits☆25Oct 20, 2025Updated last year
- A Group Policy (GPO) audit tool☆14Aug 7, 2024Updated 2 years ago
- ☆18Jun 25, 2024Updated 2 years ago
- This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used…☆251Dec 6, 2024Updated last year
- x86_64 LKM linux rootkit☆17Jul 1, 2023Updated 3 years ago
- XOR-based shellcode encoder☆29Apr 20, 2023Updated 3 years ago
- A writing and design platform that thinks nonlinearly (in relationships) while enabling you to generate documents and communicate your wo…☆20Apr 12, 2026Updated 6 months ago
- Decrypt GlobalProtect configuration and cookie files.☆161Sep 10, 2024Updated 2 years ago
- Convert Nmap output for integration with other Project Discovery tools☆15Apr 2, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- NFS Scanner is a Python tool designed to scan, list, and mount NFS shares on a given network range or a single IP address.☆10Oct 27, 2025Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆64Feb 4, 2026Updated 8 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆217Oct 19, 2024Updated 2 years ago
- warberry-ng is a modular suite of configuration scripts to prepare a Raspberry Pi running Kali Linux for red team operations and penetrat…☆12Jul 24, 2025Updated last year
- ☆91May 15, 2024Updated 2 years ago
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- Neo4jWordlistHarvester but then with bloodhound json files☆13Jun 10, 2025Updated last year
- Execute commands in other Sessions☆95Jul 29, 2024Updated 2 years ago
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆11May 17, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆225Oct 22, 2023Updated 3 years ago
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆486Feb 16, 2026Updated 8 months ago
- King of Bug Bounty Tips Simple Tool☆13Oct 2, 2021Updated 5 years ago
- ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminatin…☆151Jan 15, 2025Updated last year
- LDAP enumeration tool implemented in Python3☆225May 20, 2025Updated last year
- Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the …☆13Jul 11, 2024Updated 2 years ago
- Leak NTLM via Website tab in teams via MS Office☆79Mar 28, 2024Updated 2 years ago
- msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…☆42Mar 13, 2025Updated last year
- C# DInvoke Shellcode Runner☆31Feb 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Decrypt Veeam database passwords☆223Dec 8, 2025Updated 10 months ago
- Scripts to interact with Microsoft Graph APIs☆47Nov 7, 2024Updated last year
- ☆135Feb 11, 2025Updated last year
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆631Jan 20, 2026Updated 9 months ago
- Spin up a fully configured, host‑only malware analysis lab with FlareVM, REMnux or CAPE Sandbox using a few repeatable commands.☆37Aug 15, 2026Updated 2 months ago
- ☆27May 16, 2023Updated 3 years ago
- ScriptSentry finds misconfigured and dangerous logon scripts.☆677Updated this week