Resources
wordlists
trickest/wordlists
A regularly updated collection of real-world infosec wordlists covering CMS paths, robots.txt entries and subdomains for use in security testing.
Topics
Related projects
Infosec_Reference6kA large curated information security reference covering penetration testing, reverse engineering, forensics, red and blue teaming, and more, organized as a browsable index of techniques, tools and learning links.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
Active-Directory-Exploitation-Cheat-Sheet6.8kA curated cheat sheet of common Windows Active Directory enumeration, privilege-escalation, lateral-movement, and persistence techniques with commands.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
hetty12.5kHetty is an HTTP toolkit for security research, combining a MITM proxy, request replay, interception, scope management and a web admin interface as an open-source alternative to Burp Suite Pro.