Penetration Testing

daffainfo/allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

devsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

hamed233/cybersecurity-mastery-roadmap

A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance

tennc/webshell

This is a webshell open source project

autorecon/autorecon

Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

blacklanternsecurity/bbot

The recursive internet scanner for hackers. 🧡

oj/gobuster

Directory/File, DNS and VHost busting tool written in Go

alessandroz/lazagne

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool

x0rz/eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

cliffe/secgen

Create randomly insecure VMs

ayoubfaouzi/al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

azeemidrisi/phonesploit-pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

google/tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high…

rofl0r/proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers

olivierlaflamme/cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet