active-directory-wordlists

Active Directory Wordlists

amass

In-depth Attack Surface Mapping and Asset Discovery

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

attacktive-directory-tools

awesome-api-security

A collection of awesome API Security tools and resources.

azure-cli-cheatsheet

Azure CLI Cheatsheet

bug-bounty

Ressources for bug bounty hunting

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

command-injection-payload-list

🎯 Command Injection Payload List

cors-poc

devops-essentials-sample-app

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

f5-bigip-decode

Python 3 script to decode F5 BigIP cookies

hack-supriya

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

jwt-cracker

Simple HS256 JWT token brute force cracker

knock

Knock Subdomain Scan

lets-be-bad-guys

A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

oscp-notes

OSCP Notes written from PWK Course

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-with-python

Python Pentesting