Trending repositories for topic enumeration

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web path scanner

Monitor linux processes without root permissions

In-depth attack surface mapping and asset discovery

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A fast, simple, recursive content discovery tool written in Rust.

Tools and Techniques for Red Team / Penetration Testing

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Everything needed for doing CTFs

Username enumeration and password spraying tool aimed at Microsoft O365.

Red Team Cheatsheet in constant expansion.

Collection of PowerShell functions a Red Teamer may use in an engagement

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

:new: The Multi-Tool Web Vulnerability Scanner.

无状态子域名爆破工具

A high performance offensive security tool for reconnaissance and vulnerability scanning

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Modular Enumeration and Password Spraying Framework

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Modular Enumeration and Password Spraying Framework

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Everything needed for doing CTFs

Collection of PowerShell functions a Red Teamer may use in an engagement

Username enumeration and password spraying tool aimed at Microsoft O365.

Red Team Cheatsheet in constant expansion.

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Monitor linux processes without root permissions

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

:new: The Multi-Tool Web Vulnerability Scanner.

Web path scanner

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fast, simple, recursive content discovery tool written in Rust.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

无状态子域名爆破工具

Tools and Techniques for Red Team / Penetration Testing

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web path scanner

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

🎲 Zero-dependencies PHP library to supercharge enum functionalities.

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Monitor linux processes without root permissions

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Username enumeration and password spraying tool aimed at Microsoft O365.

💻 Certified ethical hacker summary in bullet points

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

无状态子域名爆破工具

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Red Team Cheatsheet in constant expansion.

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Everything needed for doing CTFs

🎲 Zero-dependencies PHP library to supercharge enum functionalities.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Modular Enumeration and Password Spraying Framework

Username enumeration and password spraying tool aimed at Microsoft O365.

A Tool that Finds, Enumerates, and Exploits Reolink Cameras.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

💻 Certified ethical hacker summary in bullet points

Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.

Everything needed for doing CTFs

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Unauthenticated enumeration of AWS, Azure, and GCP Principals

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Perform automated network reconnaissance scans

Red Team Cheatsheet in constant expansion.

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Collection of PowerShell functions a Red Teamer may use in an engagement

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Monitor linux processes without root permissions

A collection of one-liners for bug bounty hunting.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

🎲 Zero-dependencies PHP library to supercharge enum functionalities.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Username enumeration and password spraying tool aimed at Microsoft O365.

Fancy reverse and bind shell handler

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

💻 Certified ethical hacker summary in bullet points

🎲 Zero-dependencies PHP library to supercharge enum functionalities.

Modular Enumeration and Password Spraying Framework

Bruter is an OSINT tooling, an experiment to build a reconnaissance simple app to have fun 🕵️‍♂️

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

A Tool that Finds, Enumerates, and Exploits Reolink Cameras.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A collection of one-liners for bug bounty hunting.

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

Python code snippets from Discrete Mathematics for Computer Science specialization at Coursera

Collection of PowerShell functions a Red Teamer may use in an engagement

🧮 SOCKS5/4/4a 🌾 validating proxy pool and upstream SOCKS5 server for 🤽 LOLXDsoRANDum connections 🎋

Speed up your pentest enumeration

Username enumeration and password spraying tool aimed at Microsoft O365.

Perform automated network reconnaissance scans

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

Speed up your pentest enumeration

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Tools and Techniques for Red Team / Penetration Testing

Web path scanner

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Monitor linux processes without root permissions

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Fancy reverse and bind shell handler

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Automated NoSQL database enumeration and web application exploitation tool.

A collection of one-liners for bug bounty hunting.

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to gather information and identify the attack surface, mak...

Speed up your pentest enumeration

Incursore came from nmapAutomator to be your personal raider while you enumerate a target.

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

Bruter is an OSINT tooling, an experiment to build a reconnaissance simple app to have fun 🕵️‍♂️

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Bug Bounty Vps Setup Tools

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

A fast enumeration tool for publicly exposed Azure Storage blobs.

Active Directory Penetration Testing for Red Teams

Unauthenticated enumeration of AWS, Azure, and GCP Principals

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

🧮 SOCKS5/4/4a 🌾 validating proxy pool and upstream SOCKS5 server for 🤽 LOLXDsoRANDum connections 🎋

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Tools and Techniques for Red Team / Penetration Testing