penetration-testing

There are 616 repositories under penetration-testing topic.

Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
android awesome bug-bounty fuzzing hacking penetration-testing pentesting-windows reverse-engineering security
77939
PayloadsAllTheThings
swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
bounty bugbounty bypass cheatsheet enumeration hacking hacktoberfest methodology payload payloads penetration-testing pentest privilege-escalation redteam security vulnerability web-application
Language:Python 57125
h4cker
The-Art-of-Hacking / h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
ai ai-security artificial-intelligence awesome-list awesome-lists cybersecurity ethical-hacking exploit exploit-development exploits hacker hackers hacking hacking-series penetration-testing training vulnerability vulnerability-assessment vulnerability-identification vulnerability-management
Language:Jupyter Notebook 16718
vitalysim / Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
ctf hacking privilege-escalation reverse-engineering buffer-overflow penetration-testing owasp exploit malware windows-privilege-escalation privilege-escalation-linux mitm
14745
sundowndev / hacker-roadmap
A collection of hacking tools, resources and references to practice ethical hacking.
hacking hacking-tool penetration-testing roadmap frameworks hacktools pentest web-hacking exploitation post-exploitation information-gathering pentesting security
12669
maurosoria / dirsearch
Web path scanner
appsec brute bug-bounty bugbounty dirsearch enumeration fuzzer fuzzing hacking hacking-tool infosec penetration-testing pentest-tool pentesting python red-teaming redteam scanner security wordlist
Language:Python 11319
qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
awesome awesome-list list penetration-testing security web websecurity
10876
vanhauser-thc / thc-hydra
hydra
penetration-testing password-cracker network-security hydra thc pentesting pentest pentest-tool brute-force brute-force-passwords bruteforce-attacks brute-force-attacks bruteforcing bruteforcer bruteforce password-cracking
Language:C 9083
Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
analysis hacking information-gathering instagram instagram-account instagram-api nickname osint osint-python penetration-testing python python3 tool
Language:Python 8857
samratashok / nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
activedirectory hacking infosec nishang penetration-testing powershell red-team redteam security
Language:PowerShell 8375
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
apk-analysis binary-analysis code-analyzer devsecops exploitation-framework hacker-tools information-security malware-analysis penetration-testing pentesting-tools privacy-compliance redteam-tools security-audit security-automation smart-contracts static-analysis vulnerability-scanners wifi-hacking wifi-security
8008
Sn1per
1N3 / Sn1per
Attack Surface Management Platform
attack-surface attack-surface-management attacksurface bugbounty-platform cybersecurity hacking hacking-tools osint-framework osint-tool penetration-testing pentest-scripts pentest-tool pentest-tools pentesting pentesting-tools security security-tools sn1per sn1per-professional
Language:Shell 7566
rengine
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
security-tools osint recon recon-engine reconnaissance scanner scanner-web rengine information-gathering bugbounty hacking scanning pentesting bug-bounty infosec penetration-testing
Language:Python 7006
wstg
OWASP / wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
application-security appsec best-practices bugbounty guide hacking hacktoberfest owasp penetration-testing pentesting security
Language:Dockerfile 6752
mandiant / commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
penetration-testing red-teaming windows fireeye-flare
Language:PowerShell 6712
monkey
guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
adversary-emulation infection-monkey penetration-testing security-automation security-tools
Language:Python 6494
GreyDGL / PentestGPT
A GPT-empowered penetration testing tool
large-language-models llm penetration-testing python
Language:Python 6422
Mr-xn / Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
authentication-bypass bypass cobalt-strike csrf csrf-webshell cve cve-cms exploit getshell oa-getshell penetration-testing penetration-testing-poc php-bypass poc poc-exp rce sql-getshell sql-poc thinkphp
Language:HTML 6179
trickest / cve
Gather and update all available and newest CVEs with their PoC.
poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security infosec hacking pentesting penetration-testing red-team security-tools software-vulnerability
Language:HTML 6119
infoslack / awesome-web-hacking
A list of web application security
penetration-testing web-hacking vulnerabilities scanner hacking hacking-tools metasploit web-security appsec owasp pentesting security vulnerability
5453
daffainfo / AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
bug bugbounty bugbountytips bypass hacking infosec payload payloads penetration-testing pentest reconnaissance security vulnerability
5436
rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security blueteam red-team windows osx forensics hacking-simulator privilege-escalation-exploits hacktoberfest hacktoberfest2021
Language:CSS 5368
reconftw
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bugbounty hacking recon pentest subdomain nuclei vulnerabilities scanner fuzzing osint penetration-testing pentesting reconnaissance dns pentest-tool security security-tools bug-bounty
Language:Shell 5266
RedTeam-Tools
A-poc / RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
cheatsheet cybersecurity hacking penetration-testing red-team security-tools linux resources tools windows enumeration payload pentest pentest-tools red-team-tools mitre-attack redteam
5241
urbanadventurer / WhatWeb
Next generation web scanner
security web scanner ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test hacking hacking-tools network-security recon appsec application-security pentesting pentesting-tools pentest web-hacking security-tools
Language:Ruby 5123
osmedeus
j3ssie / osmedeus
A Workflow Engine for Offensive Security
scanning reconnaissance penetration-testing security-tools pentest-tool hacking-tool information-gathering hacking osint bugbounty pentesting golang security go bug-bounty attack-surface attack-surface-management
Language:Go 5102
awesome-shodan-queries
jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
shodan infosec pentesting iot internet-of-things security awesome awesome-list hacking penetration-testing shodan-dorks dorks network-infrastructure security-tools security-scanner cloud
5085
yeahhub / Hacking-Security-Ebooks
Top 100 Hacking & Security E-Books (Free Download)
hacking books security penetration-testing ebooks kali-linux hacking-security-ebooks
5080
S1ckB0y1337 / Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
activedirectory active-directory cheatsheet active-directory-cheatsheet active-directory-exploitation security pentesting penetration-testing hacking hacking-cheasheet hacking-tools hacking-tool cheat cheat-sheet exploitation privilege-escalation enumeration attack windows-active-directory windows
5077
onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
infosec pentest courses penetration-testing security-professionals lab awesome security
4989
Cheatsheet-God
OlivierLaflamme / Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
awesome cheatsheet cheatsheet-god hacking hacking-code hacking-tool howto-tutorial information-security oscp oscp-journey oscp-tools oscp5 penetration penetration-test penetration-testing pentesting refresher security security-tools security-vulnerability
4738
infobyte / faraday
Open Source Vulnerability Management Platform
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration cve appsec cybersecurity
Language:Python 4636
LyleMi / Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
web-hacking study-notes hacking pentesting security penetration-testing
Language:Python 4227
AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.
adb android android-debug-bridge cybersecurity exploit hacking metasploit-framework penetration-testing pentesting phonesploit phonesploit-pro android-hacking hacking-script hacking-tool hack meterpreter pentest-tool python hacktoberfest collaborate
Language:Python 4206
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks
4151
RhinoSecurityLabs / pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
aws aws-security penetration-testing python security
Language:Python 4055

penetration-testing

Hack-with-Github / Awesome-Hacking

swisskyrepo / PayloadsAllTheThings

The-Art-of-Hacking / h4cker

vitalysim / Awesome-Hacking-Resources

sundowndev / hacker-roadmap

maurosoria / dirsearch

qazbnm456 / awesome-web-security

vanhauser-thc / thc-hydra

Datalux / Osintgram

samratashok / nishang

We5ter / Scanners-Box

1N3 / Sn1per

yogeshojha / rengine

OWASP / wstg

mandiant / commando-vm

guardicore / monkey

GreyDGL / PentestGPT

Mr-xn / Penetration_Testing_POC

trickest / cve

infoslack / awesome-web-hacking

daffainfo / AllAboutBugBounty

rmusser01 / Infosec_Reference

six2dez / reconftw

A-poc / RedTeam-Tools

urbanadventurer / WhatWeb

j3ssie / osmedeus

jakejarvis / awesome-shodan-queries

yeahhub / Hacking-Security-Ebooks

S1ckB0y1337 / Active-Directory-Exploitation-Cheat-Sheet

onlurking / awesome-infosec

OlivierLaflamme / Cheatsheet-God

infobyte / faraday

LyleMi / Learn-Web-Hacking

AzeemIdrisi / PhoneSploit-Pro

Hack-with-Github / Free-Security-eBooks

RhinoSecurityLabs / pacu