Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote a…

Enumerate a target Based off of Nmap Results

Automate installation of extra pentest tools on Kali Linux

This is a multi-use bash script for Linux systems to audit wireless networks.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Linux privilege escalation auditing tool

Empire is a PowerShell and Python 3.x post-exploitation framework.

In-depth Attack Surface Mapping and Asset Discovery

The ultimate WinRM shell for hacking/pentesting

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and re…

🎅 The Multi-Tool Web Vulnerability Scanner.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A script that you can run in the background!

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Automated pentest framework for offensive security experts

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

Linux enumeration tool for pentesting and CTFs with verbosity levels

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

Active Directory Assessment and Privilege Escalation Script

Quick SQLMap Tamper Suggester

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.