pentest

A curated list of awesome OSCP resources

This map lists the essential techniques to bypass anti-virus and EDR

Awesome Node.js Security resources

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Pentest Report Generator

List of Github repositories and articles with list of dorks for different search engines

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

SSRF (Server Side Request Forgery) testing resources

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Guia de Cyber Security: trilhas, cursos, livros, canais, ferramentas e comunidades para você entrar e evoluir na área.

Active Directory and Internal Pentest Cheatsheets

Mobile Edge-Dynamic Unified Security Analysis

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Collection of quality safety articles. Awesome articles.

Notes about attacking Jenkins servers

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Metlo is an open-source API security platform.

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

jSQL Injection is a Java application for automatic SQL database injection.

ODAT: Oracle Database Attacking Tool

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Automatic SSTI detection tool with interactive interface

A curated list of awesome privilege escalation

:vulcan_salute: Fast, modern, easy-to-use network scanner