.gitignore

# Offensive Security Toolkit - .gitignore

# [!] CRITICAL: Never commit credentials, API keys, or sensitive data

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
wheels/
pip-wheel-metadata/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST

# Virtual Environment
venv/
env/
ENV/
env.bak/
venv.bak/

# Virtual Environment Artifacts (Windows/Git Bash)
Lib/
.venv/Scripts/
venv/Scripts/
Include/
pyvenv.cfg
.Python

# PyCharm
.idea/
*.iml
*.iws

# VSCode
.vscode/
*.code-workspace

# Jupyter Notebook
.ipynb_checkpoints

# Testing
.pytest_cache/
.coverage
.coverage.*
htmlcov/
.tox/
.nox/
coverage.xml
*.cover

# Logs and Output
logs/
*.log
output/
results/
screenshots/
captures/

# Configuration (SECURITY CRITICAL)
config/*.yaml
config/*.yml
config/*.json
config/*.ini
config/*.conf
!config/config.yaml.example
!config/config.template.yaml

# Credentials and Secrets (NEVER COMMIT)
*.key
*.pem
*.crt
*.p12
*.pfx
*.keystore
*.jks
secrets/
credentials/
credentials.txt
passwords.txt
hashes.txt
loot/
.env
.env.*
*.env

# API Keys and Tokens
*api_key*
*api_token*
*access_token*
*secret_key*
apikeys.txt
tokens.txt

# Target Lists (may contain sensitive info)
config/authorized_targets.txt
config/targets.txt
targets/
scope/

# Exploit Development
payloads/compiled/
payloads/*.exe
payloads/*.dll
*.exe
*.dll
*.bin
*.elf
shellcode/compiled/
exploits/live/
payloads/live/

# Wordlists (large files)
wordlists/
dictionaries/
*.txt.gz
rockyou.txt

# Database Files
*.db
*.sqlite
*.sqlite3

# Temporary Files
*.tmp
*.temp
*.swp
*.swo
*~
.DS_Store
Thumbs.db
tmp/
temp/

# Network Captures
*.pcap
*.pcapng
*.cap

# Reports (may contain sensitive findings)
reports/*.html
reports/*.pdf
reports/*.docx
!reports/template.*

# Backups
*.bak
*.backup
*.old

# OS-specific
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Desktop.ini

# Session Files
*.session
sessions/

# Notes and Documentation (local only)
NOTES.md
TODO.local.md
scratch/
drafts/

# Archive Files
*.zip
*.tar.gz
*.tar.bz2
*.rar
*.7z

# Compiled Binaries
bin/compiled/
compiled/

# Cache directories
.cache/
cache/

# Metasploit
.msf4/
.msf4.bak/
*.rc

# Burp Suite
*.burp

# Browser Data (credential harvesting results)
cookies/
passwords/
tokens/
sessions/

# Memory Dumps
*.dmp
*.dump

# SSH Keys
id_rsa
id_dsa
id_ecdsa
id_ed25519
*.ppk

# Certificates
*.csr
*.der

# Private Data
private/
confidential/
internal/

# Development
.mypy_cache/
.dmypy.json
dmypy.json
.pyre/

# Documentation builds
docs/_build/
docs/_static/
docs/_templates/

# IDE Files
*.sublime-*

# Build & Test Artifacts
.pytest_cache/
.ruff_cache/
.benchmarks/
htmlcov/
.coverage
coverage.xml
*.cover
test_output/
share/

# Virtual Environment (additional patterns)
.venv/
.virtualenv/

# Python compiled
*.pyc
__pycache__/