pentest-tools is a collection of custom security tools for penetration testing and bug bounty work.
The collection addresses the need for quick, specialized utilities across common reconnaissance and vulnerability testing tasks. It provides individual scripts written in Bash, Python, and PHP that handle specific security operations such as DNS enumeration through multiple methods, CORS and CRLF testing, subdomain extraction from certificate transparency logs, reverse DNS lookups, zone transfer testing, and various other targeted security checks. Each tool is designed to solve a narrow problem efficiently rather than provide comprehensive functionality.
This collection suits security professionals and bug bounty hunters who need lightweight, focused utilities for specific reconnaissance or testing phases. The tools work well for those already comfortable with command-line workflows and who prefer composable single-purpose scripts over monolithic frameworks. The project includes utilities for domain enumeration, IP address manipulation, web vulnerability testing, and certificate analysis. Some tools have been separated into dedicated repositories for better visibility and maintenance, which the README documents explicitly.
The project shows active curation, with a significant cleanup that removed non-functional scripts and relocated specialized tools to independent repositories to improve discoverability. Development maintains a pragmatic focus on tools that solve immediate penetration testing needs, with the collection evolving through removal of obsolete utilities and reorganization to keep the core repository focused.
