Statistics for topic enumeration

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

Monitor linux processes without root permissions

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

Username enumeration and password spraying tool aimed at Microsoft O365.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A collection of one-liners for bug bounty hunting.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web path scanner

A fast, simple, recursive content discovery tool written in Rust.

Monitor linux processes without root permissions

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Wordlists handcrafted (and automated) with ♥

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate repor...

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web path scanner

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Tools and Techniques for Red Team / Penetration Testing

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Speedy probe-based UDP service scanner

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate repor...

Information Gatherer & Webapps Exploiter

Hunt SSL Certificates for interesting keywords on major cloud service providers / internet

Speed up your pentest enumeration

Speedy probe-based UDP service scanner

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

Information Gatherer & Webapps Exploiter

The tool 𝗲𝗻𝘂𝗺𝘅 is a framework built for Kali Linux that uses a plethora of existing pentesting tools as plugins in order to simplify and standardize the enumeration stage at a simplistic level. I...

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Tools and Techniques for Red Team / Penetration Testing

Web path scanner

In-depth attack surface mapping and asset discovery

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

The tool 𝗲𝗻𝘂𝗺𝘅 is a framework built for Kali Linux that uses a plethora of existing pentesting tools as plugins in order to simplify and standardize the enumeration stage at a simplistic level. I...

Speedy probe-based UDP service scanner

Speed up your pentest enumeration