Penetration testing methodologies, frameworks, reporting, and automation tools.
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
mandiant/commando-vmCustomizable Windows-based virtual machine distribution pre-packaged with offensive security tools for penetration testing and red teaming operations.
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
gtfobins/gtfobins.github.ioGTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
lylemi/learn-web-hackingStructured study notes covering web hacking fundamentals, common vulnerabilities, penetration testing techniques, and defensive security, with…
firerpa/lamdaAndroid Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…
spacehuhntech/esp8266_deautherAffordable WiFi hacking platform for testing and learning
mr-xn/burpsuite-collections有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using…
kathanp19/howtohuntCollection of methodology and test case for various web vulnerabilities.
bikini/exploitariumCurated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…
openwall/johnJohn the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems,…
rfidresearchgroup/proxmark3Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…
defectdojo/django-defectdojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPM
cisofy/lynisAgentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…
goochbeater/spiritual-spell-red-teamingA repo for jailbreaking various LLMs, mainly Claude
