0x0FB0

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

infer

A static analyzer for Java, C, C++, and Objective-C

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

chunked-coding-converter

Burp suite 分块传输辅助插件

SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

hvac

:lock: Python 3.X client for HashiCorp Vault

git-hound

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

coronavirus

Folding@home COVID-19 efforts

My-Shodan-Scripts

Collection of Scripts for shodan searching stuff.

enumerate-iam

Enumerate the permissions associated with AWS credential set

DumpsterDiver

Tool to search secrets in various filetypes.

WeblogicScan

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

subzy

Subdomain takeover vulnerability checker

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

wig

WebApp Information Gatherer

jmet

Java Message Exploitation Tool

NTLMRecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

Spring-Boot-Vulnerability

sploitego

Maltego Penetration Testing Transforms

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

AzureADRecon

AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment.

ares

A python wrapper around https://cve.circl.lu.

threatbutt

schreddies.github.io