six2dez / Pentest Book
Stars: ✭ 266
Projects that are alternatives of or similar to Pentest Book
Cheatsheet God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Stars: ✭ 3,521 (+1223.68%)
Mutual labels: hacking, pentesting, oscp
Hrshell
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
Stars: ✭ 193 (-27.44%)
Mutual labels: hacking, pentesting, oscp
Fdsploit
File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
Stars: ✭ 199 (-25.19%)
Mutual labels: hacking, pentesting, oscp
Awesome Privilege Escalation
A curated list of awesome privilege escalation
Stars: ✭ 413 (+55.26%)
Mutual labels: hacking, pentesting, oscp
Penetration Testing Study Notes
Penetration Testing notes, resources and scripts
Stars: ✭ 461 (+73.31%)
Mutual labels: hacking, pentesting, oscp
Linux Smart Enumeration
Linux enumeration tool for pentesting and CTFs with verbosity levels
Stars: ✭ 1,956 (+635.34%)
Mutual labels: hacking, pentesting, oscp
Capsulecorp Pentest
Vagrant VirtualBox environment for conducting an internal network penetration test
Stars: ✭ 214 (-19.55%)
Mutual labels: hacking, pentesting
Webmap
A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing
Stars: ✭ 188 (-29.32%)
Mutual labels: hacking, pentesting
O365recon
retrieve information via O365 with a valid cred
Stars: ✭ 204 (-23.31%)
Mutual labels: hacking, pentesting
Cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
Stars: ✭ 2,775 (+943.23%)
Mutual labels: hacking, pentesting
Evil Ssdp
Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
Stars: ✭ 204 (-23.31%)
Mutual labels: hacking, pentesting
Getjs
A tool to fastly get all javascript sources/files
Stars: ✭ 190 (-28.57%)
Mutual labels: hacking, pentesting
Lyncsmash
locate and attack Lync/Skype for Business
Stars: ✭ 258 (-3.01%)
Mutual labels: hacking, pentesting
Rspet
RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.
Stars: ✭ 251 (-5.64%)
Mutual labels: hacking, pentesting
description: >- This book contains a bunch of info, scripts and knowledge used during my pentests.
/home/six2dez/.pentest-book
Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram(@six2dez), Twitter(@six2dez1) or Discord(six2dez#8201), GitHub pull request is welcomed too ;) Hack 'em all
Usage: Just use the search bar at the upper or navigate through the sections of the left zone. Enjoy it 😊
Don't you know where to go now? Let me introduce you to some of the most popular pages on this wiki:
- Know your target! Make a proper recon!
- What can you do in those strange ports?
- Doing a web pentest? Don't forget to check out any of these common attacks!
- Do you have the same hype as me with cloud services? They also have their vulnerabilities
- Stuck again with Windows and Kerberos? Here is my cheatsheet
- The mobile world does not stop growing, see my tips for Android and iOS
- Burp Suite is the tool most loved by everyone, but you have to know a few tricks, also check my preferred extensions
- I'm really proud of Pentesting Web Checklist
- If you want to know which web fuzzer fits you best, take a look at the comparison.
Important note: I use this wiki daily for my work and I am constantly updating it. I'm very sorry if a link to a page changes or I move it, if you need something you are free to contact me.
You can support this work buying me a coffee:
{% embed url="https://www.buymeacoffee.com/six2dez" %}
Stargazers over time
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].