0xtavian

trufflehog

Find and verify secrets

nebula

A scalable overlay networking tool with a focus on performance, simplicity and security

sampler

Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

script

Making it easy to write shell-like scripts in Go

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

redsocks

transparent TCP-to-proxy redirector

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

scant3r

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

resolvers

The most exhaustive list of reliable DNS resolvers.

open-source-web-scanners

A list of open source web security scanners

shellz

shellz is a small utility to manage your ssh, telnet, kubernetes, winrm, web or any custom shell in a single place.

RAUDI

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

kdigger

Kubernetes focused container assessment and context discovery tool for penetration testing

rescope

A scope generation tool for Burp Suite & ZAP

reconness

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

the-nuclei-templates

Nuclei templates written by us.

Bug-Bounty-Scripts

The scripts I write to help me on my bug bounty hunting

gjfy

gjfy is a standalone one-time link server. Use it to securely share secrets.

masscan

IVRE's fork of the famous TCP port scanner. See below for details.

websy

Keep track of changes in website with WEBSY

k8s_ssrf_portscanner

metaprompter

roundrobin

roundrobin with configurable rotating strategies

0xtavian

Interlace C++

ERLPopper

Module and example scripts to help test the security of Erlang Runtime System (ERTS) nodes using Erlang Distribution Protocol