A curated map for red-team operators, security researchers, and defenders.
Identity, web, cloud, payload research, C2, AI red teaming, fuzzing, reverse engineering, and practical labs.
Table of Contents · Methodology · AI Red Teaming · Fuzzing · Graph Map
- Features
- Legal Note
- Get Started
- Core Red Team Tracks
- AI Red Teaming
- Fuzzing
- Repository Graph Map
- Full Resource Index
- Contributing
- Focused topic pages for fast browsing.
- Fast navigation for operators who know what they need.
- Modern sections for AI red teaming and fuzzing.
- Link-check workflow to catch dead resources.
- Clean visual front page for GitHub dark mode.
Use these resources only where you have explicit authorization. Keep scope, written permission, evidence handling, and cleanup requirements clear before testing.
- Start with the methodology page if you are planning an engagement.
- Jump into the track closest to your objective.
- Use the full index when you need a specific tool category.
- Add good resources with a short reason why they belong.
| Area | Primary resources |
|---|---|
| Identity & Active Directory | Windows AD Pentest, AD Audit & Exploit Tools |
| Lateral Movement | Lateral Movement, Post Exploitation |
| Web & API | Web Application Pentest, REST API Audit |
| Privilege Escalation | Windows PrivEsc, Linux PrivEsc |
| Payloads & Evasion | Payloads / AV Evasion, EDR Evasion |
| Cloud | Azure Red Team Master, Cloud Attack Tools |
| Command & Control | C2 Frameworks, Cobalt Strike |
| Recon | External Pentest, Network Scanning |
| AI Systems | AI Red Teaming |
| Vulnerability Research | Fuzzing, Source/Binary Analysis |
Keep entries clean and useful:
- [Project name](PROJECT_URL) - short reason it belongs here.Good additions are active tools, practical labs, research writeups, defensive validation references, and well-maintained cheat sheets.
See LICENSE.