wattocyber/oscp-notes-2026OSCP notes vault + exam cockpit dashboard: merged technique notes, variable-filled command decks, machines, creds, and runbook for exam day. MIT.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
s1ckb0y1337/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
samyk/poisontapExploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using…
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
samratashok/nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
cdk-team/cdk📦 Make security testing of K8s, Docker, and Containerd easier.
