Awesome-Redteam
A red-teaming and offensive-security knowledge base with cheat sheets, tools, and tips for reconnaissance, vulnerability research, exploitation, and both offensive and defensive operations.
Awesome-Redteam is a knowledge base for red teaming and offensive security, stating that its techniques, ideas, and tools are meant only for education and research and not for illegal use or unauthorized penetration testing. It organizes cheat sheets, scripts, and tips alongside an open-source navigation section covering cryptography and encoding tools, cyberspace search engines, Google and GitHub dorking, open-source intelligence, threat intelligence, and disclosed vulnerabilities.
Further sections cover reconnaissance, including fingerprinting, brute-force tools and dictionaries, and phishing; vulnerability research, including vulnerable environments for basic, IoT, Active Directory, and cloud targets and proof-of-concept templates; and vulnerability exploitation, including code audit and deserialization issues in Java and PHP, and database attacks against Redis, MySQL, Oracle, and MSSQL. It also links to mind maps and cheat sheets, learning and practice platforms, and separate sections on blue-team defensive security and operational security.