#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
v1s1t0r1sh3r3/airgeddonThis is a multi-use bash script for Linux systems to audit wireless networks.
bishopfox/unredacterNever ever ever use pixelation as a redaction technique
aboul3la/sublist3rFast subdomains enumeration tool for penetration testers
autorecon/autoreconMulti-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
dstotijn/hettyAn HTTP toolkit for security research.
chaitin/xray一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
shmilylty/oneforallMulti-source subdomain enumeration tool with 50+ collection modules, DNS brute-force, passive DNS analysis, certificate transparency, search engine…
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
samratashok/nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.
noraj/oscp-exam-report-template-markdown:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
x0rz/eqgrpDecrypted content of eqgrp-auction-file.tar.xz
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
olivierlaflamme/cheatsheet-godPenetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
projectdiscovery/naabuA fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
