Statistics for topic enumeration

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

In-depth attack surface mapping and asset discovery

Web path scanner

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A fast, simple, recursive content discovery tool written in Rust.

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

Filter and enrich a list of subdomains by level

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

A fast, simple, recursive content discovery tool written in Rust.

Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

Bruter is an OSINT tooling, an experiment to build a reconnaissance simple app to have fun 🕵️‍♂️

Modular Enumeration and Password Spraying Framework

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Speed up your pentest enumeration

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Tools and Techniques for Red Team / Penetration Testing

Web path scanner

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to gather information and identify the attack surface, mak...

Speed up your pentest enumeration

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.