GitHub repo leaderboard by stars, growth rate and activity.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
A collection of hacking / penetration testing resources to make you better!
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Automation for internal Windows Penetrationtest / AD-Security
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | A list of useful payloads and bypass for Web Application Security and Pentest/CTF | Python | 80,733 | — | last pushed 2 weeks ago |
| 2 | A collection of hacking / penetration testing resources to make you better! | — | 17,384 | — | last pushed 4 months ago |
| 3 | A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. | — | 6,727 | — | last pushed 4 months ago |
| 4 | An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version. | CSS | 5,989 | — | last pushed 11 months ago |
| 5 | Automation for internal Windows Penetrationtest / AD-Security | PowerShell | 3,695 | — | last pushed 1 year ago |
| 6 | A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. | PowerShell | 2,767 | — | last pushed 1 year ago |
| 7 | RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements. | — | 1,931 | — | last pushed 11 months ago |
| 8 | Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed. | Python | 648 | — | last pushed 2 days ago |
All · 11,474