A curated list of TryHackme (THM) and HackTheBox (HTB) resources, modules and rooms to be used with OSCP. The list is not complete and will be updated regularly
☆38May 28, 2023Updated 3 years ago
Alternatives and similar repositories for OSCP-Prep-Guide
Users that are interested in OSCP-Prep-Guide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and n…☆14Aug 17, 2022Updated 4 years ago
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆20Jun 20, 2022Updated 4 years ago
- My OSCP and eCPPTv3 Exam Notes☆40Aug 20, 2025Updated last year
- Basic w3af scan in Docker. Can be integrated into CI\CD☆10Feb 21, 2020Updated 6 years ago
- A collection of Python resources for Blue Team security work☆17Sep 23, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- OSCP prep checklist - study plan, exam structure, tools, and methodology☆76Feb 4, 2026Updated 6 months ago
- Obsidian Notes used to passed the OSCP exam and most HTB machines / challenges.☆56May 20, 2025Updated last year
- Offensive Security Tools☆22Jun 29, 2026Updated last month
- ☆23Jul 6, 2025Updated last year
- Notes and methodologies for penetration testing and ethical hacking. Includes preparation notes for certifications such as PJPT, CPTS, CW…☆64Dec 30, 2025Updated 7 months ago
- Apuntes Pentesting a ActiveDirectory PentesterAcademy☆24Jun 9, 2019Updated 7 years ago
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- Bridge the gap between your Markdown notes and your SysReptor report findings☆16Jul 3, 2025Updated last year
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆11Oct 29, 2018Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Demonstrating the possibility of stealing the private data of Harvard students and professors <3☆11Dec 13, 2015Updated 10 years ago
- ☆31Aug 2, 2026Updated 3 weeks ago
- Weaponized VSCode Extensions☆21May 7, 2026Updated 3 months ago
- Who needs authentication? This cache purge vulnerability finder doesn't!☆10Apr 20, 2023Updated 3 years ago
- A collection of offensive tools I built and used throughout my OSEP journey.☆22Mar 2, 2026Updated 5 months ago
- Identify vulnerabilities in your API's using the OpenAPI Security Scanner☆12Dec 6, 2018Updated 7 years ago
- ☆13Jun 11, 2024Updated 2 years ago
- Free Windows privilege escalation lab inspired by HTB Devel, built for PNPT and OSCP practice.☆24Jan 13, 2026Updated 7 months ago
- Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit☆12Sep 21, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last month
- A Python script for generating exploits targeting CVE-2022-4510 RCE Binwalk. It supports SSH, command execution, and reverse shell option…☆14Jun 27, 2023Updated 3 years ago
- Collection of command cheat sheets and useful resources for anyone pursuing OSCP certification.☆19Apr 11, 2025Updated last year
- Repository for tools used for the OSCP☆27Sep 18, 2025Updated 11 months ago
- Multi-protocol credential validation tool with spray and no-spray modes for penetration testing.☆33Jun 1, 2026Updated 2 months ago
- MatouWebshell 是一款基于 Vue 3 和 Python 开发的开源 Webshell 管理与利用平台。支持高度自定义的流量伪装、内网穿透及内存马注入等功能。项目具有极高的扩展性，非常欢迎安全研究人员基于此开源架构进行二次开发（如自定义修改 Payload、新增…☆23Apr 10, 2026Updated 4 months ago
- A CI/CD tutorial based on Jenkins Pipeline and AWS Fargate☆29Apr 24, 2018Updated 8 years ago
- Comprehensive notes, cheatsheets, and practical techniques for penetration testing and red teaming.☆206Jul 13, 2026Updated last month
- Simple CLI program that will fetch and convert a HackTheBox Academy module into a local file in Markdown format.☆89Mar 16, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of stuffs related to Information Security☆15Jul 26, 2020Updated 6 years ago
- ☆24Apr 16, 2019Updated 7 years ago
- HEVD Exploits for fun and learning.☆16Aug 30, 2025Updated 11 months ago
- 《红队vs.蓝队：网络攻防实战技术解析》资料仓库☆27Jul 15, 2024Updated 2 years ago
- Compiled executables for @splinter_code and @decoder_it's TcbElevation☆29Apr 19, 2024Updated 2 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆20Jun 1, 2024Updated 2 years ago
- Advanced Recon tool for Bug Bounty and Pentesting☆33Oct 22, 2025Updated 10 months ago