A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Monitor linux processes without root permissions

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

A high performance offensive security tool for reconnaissance and vulnerability scanning

A collection of custom security tools for quick needs.

Automated NoSQL database enumeration and web application exploitation tool.

Fancy reverse and bind shell handler

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

无状态子域名爆破工具

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Simple, extensible and powerful enumeration implementation for Laravel.

:new: The Multi-Tool Web Vulnerability Scanner.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

The Offensive Manual Web Application Penetration Testing Framework.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Security Tool to Look For Interesting Files in S3 Buckets

A collection of one-liners for bug bounty hunting.

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.