Awesome-Redteam

❗Disclaimer: The technologies, concepts, and tools provided in this Git repository are intended for educational and research purposes only. Any use for illegal activities, unauthorized penetration testing, or commercial purposes is strictly prohibited. Please read the Awesome-Laws before using this repository.

📖 A knowledge base for red teaming and offensive security.

👍 means recommend

Roadmap

Contents

• Open-Source Navigation
  • Cryptography
    • Online Tools
    • Offline Tools
    • Encode/Decode
    • Regular Expressions
    • Hash Algorithms
    • RSA
    • SM Algorithms
  • Cyberspace Search Engine
    • Nice Tools
    • Web/Ports
    • Google Hacking
    • GitHub Dork
  • Open-Source Intelligence
    • Nice Tools
    • Threat Intelligence
    • Disclosed Vulnerabilities
    • API Search
    • Source Code Search
  • Open-Source Resources
    • Communities/Knowledge Base
    • Mindmap/Cheat Sheets
    • Red Teaming and Offensive Security
    • Blue Teaming and Defensive Security
    • Operation Security
    • Learning and Practice Platforms
• Reconnaissance
  • Nice Tools
  • IP/Domain/Subdomain
  • Fingerprint
    • Fingerprint Collection
    • Fingerprint Reconnaissance
    • Waf Checks
  • Brute Force
    • Brute Force Tools
    • Brute Force Dictionaries
    • Generate a Custom Dictionary
    • Default Credentials
  • Social Engineering
    • Leaked Credentials
    • Email
    • SMS Online
    • Phishing
  • Mobile
• Vulnerability Research
  • Vulnerable Environments
    • Basic Vulnerabilities
    • Comprehensive Vulnerabilities
    • Vulnerable IoT Environment
    • Vulnerable Active Directory Environment
    • Vulnerable Cloud Environments
  • Proof of Concept
    • PoC/ExP
    • PoC Templates
• Vulnerability Exploits
  • Nice Tools
  • Code Audit
  • Serialization
    • Java
  • Deserialization
    • Java
    • PHP
  • Database
    • Redis
    • MySQL
    • Oracle
    • MSSQL
  • Information Disclosure
  • CMS/OA
  • Middleware/Application
• Penetration Testing
  • Nice Tools
  • Extensions
    • Chrome
    • Burp Suite
    • Yakit
  • Auxiliary Tools
    • Open-Source Toolkit
    • DNSLog
    • Command Line
    • Beautifier
    • Generator
  • SQL Injection
  • Access Control
    • Bypass 40X errors
  • XSS
  • File Inclusion
  • SSRF
  • Mobile Security
    • Mini Program
    • APK
    • SessionKey
  • Payload and Bypass
• Red Teaming and Offensive Security
  • Infrastructure
  • Reconnaissance
  • Credential Access
    • Credential Dumping
    • Local Enumeration
    • NTLM Cracking
  • Post Exploitation
    • Nice Tools
    • Binaries and Libraries
  • Persistence
    • MemShell
    • Webshell Management
    • Webshell Bypass
    • Reverse Shell Management
  • Privilege Escalation
    • Linux Local Enumeration
    • Windows Local Enumeration
    • Windows Exploits
    • Linux Exploits
    • Database Exploits
  • Defense Evasion
    • Linux Defense Evasion
    • Windows Defense Evasion
  • Proxy
    • Proxy Client
    • Proxy Tools
    • DNS Tunnel
    • ICMP Tunnel
    • Port Forwarding
  • Operation Security
• Active Directory Penetration
  • Collection and Discovery
  • Privilege Escalation
  • Known Exploited Vulnerabilities
    • MS14-068
    • noPac
    • Zerologon
    • ProxyLogon/ProxyShell
    • ProxyNotShell
    • Printnightmare
  • Methodology
    • Coerce and Relay
    • Delegation
    • ADCS
    • ACLs and ACEs
• Blue Teaming and Defensive Security
  • Memshell Detection
  • Webshell Detection
  • Blue Teaming
  • Enforcement
  • Incident Response
  • Ransomware
    • Search Engine
    • Decryption Tools
  • Open-Source Honeypot
  • Reverse Engineering
    • Nice Tools
    • Static Analysis
    • Dynamic Analysis
    • Java
    • Mobile
    • Python
    • Rust/Go/.NET
• Cloud Security
  • Resources
  • Cloud Threat Matrix
  • Cloud Services
    • Management Tools
    • AK/SK Exploit
  • Cloud Native
    • Nice Tools
    • Docker
    • Kubernetes
• Productivity-Boosting Usage Methods