📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

roadmap hacking penetration-testing post-exploitation vulnerabilities pentest exploitation hacking-tool frameworks information-gathering web-hacking hacktools

Updated Apr 12, 2020

1N3 / Sn1per

Star

Automated pentest framework for offensive security experts

Updated Aug 15, 2020
Shell

nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters

Star

A list of resources for those interested in getting started in bug bounties

education hackers hacking xss bug-bounty web-security pentest ssrf bug-bounty-hunters learn2hack

Updated Aug 1, 2020

SecWiki / linux-kernel-exploits

Star

linux-kernel-exploits Linux平台提权漏洞集合

linux awesome collection kernel exploit tool pentest

Updated Jul 13, 2020
C

k8gege / K8tools

Star

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan rar-mysql

Updated Aug 15, 2020
PowerShell

onlurking / awesome-infosec

Star

A curated list of awesome infosec courses and training resources.

security awesome lab penetration-testing courses infosec pentest security-professionals

Updated May 14, 2020

sensepost / objection

Star

📱 objection - runtime mobile exploration

android security ios mobile framework instrumentation pentest frida

Updated Aug 13, 2020
Python

urbanadventurer / WhatWeb

Star

Next generation web scanner

Updated Aug 6, 2020
Ruby

foospidy / payloads

Star

Git All the Payloads! A collection of web attack payloads.

hacking xss cybersecurity sqli passwords pentest appsec payload payloads web-attack-payloads

Updated Jul 19, 2020
Shell

nixawk / pentest-wiki

Star

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

security hacking pentest

Updated May 25, 2020
Python

lanjelot / patator

Star

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

brute-force pentest

Updated Jul 26, 2020
Python

coreb1t / awesome-pentest-cheat-sheets

Star

Collection of the cheat sheets useful for pentesting

security awesome cheatsheet penetration-testing pentest security-cheat-sheets pentest-cheat-sheets

Updated Feb 13, 2020

evilcos / xssor2

Star

XSS'OR - Hack with JavaScript.

encoding hack xss probe csrf pentest hacking-tool pentest-tool

Updated Jul 28, 2020
JavaScript

k8gege / Ladon

Star

大型内网渗透扫描器&Cobalt Strike，Ladon7.0内置83个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

Updated Aug 15, 2020
C#

UndeadSec / SocialFish

Star

Automated Phishing Tool & Information Collector

python phishing educational pentesting pentest undead

Updated Jun 12, 2020
CSS

cujanovic / SSRF-Testing

Star

SSRF (Server Side Request Forgery) testing resources

pentesting pentest ssrf pentest-tool server-side-request-forgery

Updated May 25, 2020
Python

LandGrey / pydictor

Star

A powerful and useful hacker dictionary builder for a brute-force attack

password-generator hacking bruteforce wordlist brute-force pentesting weak-passwords pentest wordlist-generator password-cracker hackertools social-engineering-attacks blasting bruteforce-password-cracker password-wordlist hacker-dictionary-builder

Updated Jan 10, 2020
Python

owtf / owtf

Star

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

python linux security nist framework passive mozilla traffic owasp pentest impact kali-linux owtf semi-passive web-application-security

Updated Aug 14, 2020
Python

rewardone / OSCPRepo

Star

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

penetration-testing pentest oscp reconscan