Official Documentation

The most complete pentesting techniques wiki: Linux, Windows, web, cloud, AD and more.

Curated list of Unix binaries that can be abused to escalate privileges, bypass restrictions or transfer files.

Payloads and bypasses for web security: XSS, SQLi, SSRF, SSTI, deserialization and much more.

The Windows equivalent of GTFOBins: abusable native binaries, scripts and libraries.