Username tools for penetration testing

AI-powered ffuf wrapper

Awesome Nmap Grep

A list of public penetration test reports published by several consulting firms and academic security groups.

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Trying to tame the three-headed dog.

Covenant is a collaborative .NET C2 framework for red teamers.

The Havoc Framework.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Program for determining types of files for Windows, Linux and MacOS.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Ghidra is a software reverse engineering (SRE) framework

Linux enumeration tool for pentesting and CTFs with verbosity levels

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

A fast TCP/UDP tunnel over HTTP

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

Contextual Content Discovery Tool

Script for generating revshells

Scripted Local Linux Enumeration & Privilege Escalation Checks