#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
designativedave/androratRemote Administration Tool for Android devices
rogandawes/p4wnp1_aloaP4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and…
dafthack/cloudpentestcheatsheetsThis repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
helloexp/0day各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
blacklanternsecurity/manspiderSpider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
ine-labs/awsgoatAWSGoat : A Damn Vulnerable AWS Infrastructure
syslifters/sysreptorA customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your…
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
cldrn/nmap-nse-scriptsMy collection of nmap NSE scripts
dominicbreuker/pspyMonitor linux processes without root permissions
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
zerbea/hcxdumptoolSmall tool to capture packets from wlan devices.
aquasecurity/kube-hunterHunt for security weaknesses in Kubernetes clusters
tarunkant/gopherusThis tool generates gopher link for exploiting SSRF and gaining RCE in various servers
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
