Resources
pentest-book
six2dez/pentest-book
A pentesting wiki and field handbook collecting recon, enumeration, web, cloud, mobile and post-exploitation techniques, checklists and tool notes for security practitioners.
Topics
Related projects
Active-Directory-Exploitation-Cheat-Sheet6.8kA curated cheat sheet of common Windows Active Directory enumeration, privilege-escalation, lateral-movement, and persistence techniques with commands.
RustScan20.7kA modern, fast port scanner that can scan all 65,535 ports in seconds and pipe results into Nmap or custom scripts.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
evillimiter2kEvil Limiter is a Linux network tool that monitors and throttles the upload and download bandwidth of devices on a local network using ARP spoofing and traffic shaping.
burp-ai-agent1.6kCustom AI Agent is a Burp Suite extension that brings AI-assisted analysis and passive/active vulnerability scanning into security workflows, with multi-model backends and MCP tooling for external AI clients.