0xtavian

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

script

Making it easy to write shell-like scripts in Go

metaprompter

kdigger

Kubernetes focused container assessment and context discovery tool for penetration testing

resolvers

The most exhaustive list of reliable DNS resolvers.

k8s_ssrf_portscanner

trufflehog

Find and verify secrets

open-source-web-scanners

A list of open source web security scanners

scant3r

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

RAUDI

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

Bug-Bounty-Scripts

The scripts I write to help me on my bug bounty hunting

the-nuclei-templates

Nuclei templates written by us.

reconness

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

websy

Keep track of changes in website with WEBSY

roundrobin

roundrobin with configurable rotating strategies

0xtavian

Interlace C++

Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

masscan

IVRE's fork of the famous TCP port scanner. See below for details.

gjfy

gjfy is a standalone one-time link server. Use it to securely share secrets.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

nebula

A scalable overlay networking tool with a focus on performance, simplicity and security

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

rescope

A scope generation tool for Burp Suite & ZAP

shellz

shellz is a small utility to manage your ssh, telnet, kubernetes, winrm, web or any custom shell in a single place.

redsocks

transparent TCP-to-proxy redirector

ERLPopper

Module and example scripts to help test the security of Erlang Runtime System (ERTS) nodes using Erlang Distribution Protocol

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

sampler

Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.