Repolode
Submit
m14r41

m14r41/PentestingEverything

A structured penetration testing knowledge base with methodologies, tool lists and reference PDFs across 23 security domains, from web and mobile to cloud and Wi-Fi.

View on GitHubWebsite
Stars
2,262
Forks
494
Open issues
6
Last commit
23 days ago

What is it?

PentestingEverything is a structured knowledge base for security testers covering penetration testing and application security. It is organized into 23 domains, including web, API, mobile (Android and iOS), thick client, source code review, DevSecOps, network, Wi-Fi, Active Directory, cloud, containers and Kubernetes, IoT, blockchain, and LLM or MCP security. Each domain has documentation pages describing methodology, along with lists of commonly used tools.

The project is published as a website with search and navigation, and it also includes a set of reference PDFs and a checklist site. Its tool listings cover commercial products such as Burp Suite Professional and open-source tools such as Nmap, Nuclei, OWASP ZAP and Semgrep, grouped by the testing area they serve.

The repository also ships an installable Agent Skill so that AI coding agents can query the knowledge base during authorized assessments. The skill includes rules for confirming authorization before active testing and for pacing automated requests.

Key features

  • 01Methodology documentation for 23 security testing domains
  • 02Tool lists grouped by testing area, from web to Wi-Fi and cloud
  • 03Reference PDFs and a companion pentesting checklist site
  • 04Searchable website for browsing domains and tools
  • 05Installable Agent Skill for use with AI coding agents

Use cases

  • Planning the scope and steps of a web or mobile penetration test
  • Finding which tools fit a specific testing area such as Active Directory or containers
  • Onboarding junior security testers with structured reference material
  • Letting an AI agent consult testing methodology during an authorized engagement

Quick start

  1. 1

    Browse the live website or the docs in the repository

  2. 2

    Install the portable Agent Skill into your project

    npx skills add m14r41/PentestingEverything --skill pentesting-everything

Topics

#pentesting#appsec#security-testing#vulnerability-assessment#devsecops#knowledge-base#cybersecurity#active-directory#api-pentesting#mobile-penetration-testing

FAQ

What is PentestingEverything?
A structured penetration testing knowledge base with methodologies, tool lists and reference PDFs across 23 security domains, from web and mobile to cloud and Wi-Fi. PentestingEverything is a structured knowledge base for security testers covering penetration testing and application security. It is organized into 23 domains, including web, API, mobile (Android and iOS), thick client, source code review, DevSecOps, network, Wi-Fi, Active Directory, cloud, containers and Kubernetes, IoT, blockchain, and LLM or MCP security. Each domain has documentation pages describing methodology, along with lists of commonly used tools.
Is PentestingEverything free to use? What license does it have?
PentestingEverything is open source under the MIT license. Check the license terms before using it in commercial products.
Is PentestingEverything still maintained?
Actively maintained. The last commit to PentestingEverything was on Oct 16, 2026.
What can I use PentestingEverything for?
Planning the scope and steps of a web or mobile penetration test Finding which tools fit a specific testing area such as Active Directory or containers Onboarding junior security testers with structured reference material Letting an AI agent consult testing methodology during an authorized engagement
How do I install PentestingEverything?
Browse the live website or the docs in the repository Install the portable Agent Skill into your project: npx skills add m14r41/PentestingEverything --skill pentesting-everything
Where can I get PentestingEverything?
The source code and installation instructions are on GitHub: https://github.com/m14r41/PentestingEverything

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects