List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.
1,038
26 commits
updated Aug 17, 2026
A curated map for red-team operators, security researchers, and defenders.
Identity, web, cloud, payload research, C2, AI red teaming, fuzzing, reverse engineering, and practical labs.
Table of Contents · Methodology · AI Red Teaming · Fuzzing · Graph Map
Use these resources only where you have explicit authorization. Keep scope, written permission, evidence handling, and cleanup requirements clear before testing.
| Area | Primary resources |
|---|---|
| Identity & Active Directory | Windows AD Pentest, AD Audit & Exploit Tools |
| Lateral Movement | Lateral Movement, Post Exploitation |
| Web & API | Web Application Pentest, REST API Audit |
| Privilege Escalation | Windows PrivEsc, Linux PrivEsc |
| Payloads & Evasion | Payloads / AV Evasion, EDR Evasion |
| Cloud | Azure Red Team Master, Cloud Attack Tools |
| Command & Control | C2 Frameworks, Cobalt Strike |
| Recon | External Pentest, Network Scanning |
| AI Systems | AI Red Teaming |
| Vulnerability Research | Fuzzing, Source/Binary Analysis |
Keep entries clean and useful:
- [Project name](PROJECT_URL) - short reason it belongs here.
Good additions are active tools, practical labs, research writeups, defensive validation references, and well-maintained cheat sheets.
See LICENSE.
83 followers · starred Sep 2026
265 followers · starred Jul 2025
12 followers · starred Aug 2026
List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.
1,038
26 commits
updated Aug 17, 2026
A curated map for red-team operators, security researchers, and defenders.
Identity, web, cloud, payload research, C2, AI red teaming, fuzzing, reverse engineering, and practical labs.
Table of Contents · Methodology · AI Red Teaming · Fuzzing · Graph Map
Use these resources only where you have explicit authorization. Keep scope, written permission, evidence handling, and cleanup requirements clear before testing.
| Area | Primary resources |
|---|---|
| Identity & Active Directory | Windows AD Pentest, AD Audit & Exploit Tools |
| Lateral Movement | Lateral Movement, Post Exploitation |
| Web & API | Web Application Pentest, REST API Audit |
| Privilege Escalation | Windows PrivEsc, Linux PrivEsc |
| Payloads & Evasion | Payloads / AV Evasion, EDR Evasion |
| Cloud | Azure Red Team Master, Cloud Attack Tools |
| Command & Control | C2 Frameworks, Cobalt Strike |
| Recon | External Pentest, Network Scanning |
| AI Systems | AI Red Teaming |
| Vulnerability Research | Fuzzing, Source/Binary Analysis |
Keep entries clean and useful:
- [Project name](PROJECT_URL) - short reason it belongs here.
Good additions are active tools, practical labs, research writeups, defensive validation references, and well-maintained cheat sheets.
See LICENSE.
83 followers · starred Sep 2026
265 followers · starred Jul 2025
12 followers · starred Aug 2026