A collection of my Penetration Testing Tools, Scripts, Cheatsheets

This is a collection of more than a 160+ tools, scripts, cheatsheets and other loots that I've been developing over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my real-world engagements.

Notice: In order to clone this repository properly - use --recurse-submodules switch:

git clone --recurse https://github.com/mgeeky/Penetration-Testing-Tools.git

Most of these files were initially shared on my Gists but eventually got moved into this repository.

Every time I stumbled upon a problem that could be better scripted or resolved programatically - I made effort to do just that and thus improve my technical assurance capabilities or to optimize time spent on repetitive actions during projects I've been delivering.

The collection is divided further onto following sections:

clouds - Tools I came up with during my cloud assessments
file-formats - file-format related utilities, fuzzers and alike.
linux - small bunch of Linux-based scripts and tools.
networks - Network devices & protocols Penetration Testing toolery
others - Others related somehow to this craftmanship
phishing - Scripts and tools used to deliver Phishing Awareness and Red Team simulations
red-teaming - Lots of toolings I've been using during my Purple/Red-Teaming engagements
web - Web applications security assessment related utilities.
windows - Windows goodies, scripts, exploits.

The base of these tools do not contain any customer/client related sensitive information as well as there are no engagement-specific tools developed as PoCs.

☕ Show Support ☕

This and other projects are outcome of sleepless nights and plenty of hard work. If you like what I do and appreciate that I always give back to the community, Consider buying me a coffee (or better a beer) just to say thank you! 💪

Mariusz Banach / mgeeky, (@mariuszbit)
<mb [at] binary-offensive.com>

Project Name	Stars	Repos Using This	Packages Using This	Most Recent Commit	Total Releases	Latest Release	Open Issues	License	Language
Pytest	10,641		13,256	13 hours ago	162	June 23, 2023	837	mit	Python
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
Wstg	5,951			4 days ago			51	cc-by-sa-4.0	Dockerfile
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Bandit	5,486	1,177	583	4 days ago	36	March 10, 2023	198	apache-2.0	Python
Bandit is a tool designed to find common security issues in Python code.
Syzkaller	4,847			3 days ago	95	April 25, 2021	309	apache-2.0	Go
syzkaller is an unsupervised coverage-guided kernel fuzzer
Mobileapp Pentest Cheatsheet	4,158			3 days ago			13
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Aflplusplus	3,978			2 days ago			36	apache-2.0	C
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
Pacu	3,679			6 days ago			20	bsd-3-clause	Python
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Manticore	3,535	1	1	16 days ago	1,027	August 14, 2023	264	agpl-3.0	Python
Symbolic execution tool
Suricata	3,491		1	2 days ago	4	January 31, 2023	62	gpl-2.0	C
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Pocsuite3	3,207			2 months ago			5	other	Python
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.