0xElement

SQL_Injection-Techniques

Advanced SQL Injection Techniques for Bug Bounty Hunters

agentic_security

Agentic LLM Vulnerability Scanner

x8

Hidden parameters discovery suite

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

Custom-Nuclei-Templates

mantis

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

socialhunter

crawls the website and finds broken social media links that can be hijacked

smart-contract-attack-vectors

A curated list of smart contract attack vectors

skanuvaty

Dangerously fast DNS/network/port scanner

recox

Master script for web reconnaissance

CVE-2023-25690-POC

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

TraxOsint

Osint tool for track ip adress

fuzz.txt

Potentially dangerous files

Recon

About Recon Tools,Methodology and writeups

DFW1N-OSINT

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

sqlmap

Automatic SQL injection and database takeover tool

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

cowitness

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

httptoolkit-android

Automatic Android interception & debugging with HTTP Toolkit, for Android

Afuzz

Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.

solidity-notes

Priv8-Nuclei-Templates

My Priv8 Nuclei Templates

ethereumbook

Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood

QuillAudit_Auditor_Roadmap

This repository contains a mindmap and stepwise resource to get started with Smart Contract Auditing. If you find anything missing or want to update existing resources, feel free to create a pull request.

WordList

nomore403

Tool to bypass 403/40X response codes.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Bug-Bounty-Automation

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure