Abss0x7tbh

Abss's starred repositories

ThreatPlaybook

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

Language:Python26800

mapperplus

MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

Language:JavaScript9200

ntfy

Send push notifications to your phone or desktop using PUT/POST

Language:GoApache-2.01652900

hyperfine

A command-line benchmarking tool

Language:RustApache-2.01988000

jsmon

a javascript change monitoring tool for bugbounties

Language:PythonMIT54800

samlists

Free, libre, effective, and data-driven wordlists for all!

MIT46400

BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

LGPL-3.055600

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Language:GoMIT326500

JSA

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

Language:PythonGPL-3.029800

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Language:PythonApache-2.0146000

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

MIT24800

cc-lambda

Search the common crawl using lambda functions

Language:Python8300

ipranges

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft (Azure), Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

Language:ShellCC0-1.039000

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

Apache-2.056100

bugbounty-wordlist

Real world bug bounty wordlists

MIT10500

katana

A next-generation crawling and spidering framework.

Language:GoMIT865100

GCP-GOAT

GCP GOAT is the vulnerable application for learn the GCP Security

Language:TypeScript6000

OneListForAll

Rockyou for web fuzzing

Language:Shell233500

sol2uml

Solidity contract visualisation tool

Language:TypeScriptMIT107600

lil-web3

Simple, intentionally-limited versions of web3 protocols & apps.

Language:SolidityAGPL-3.0117100

oauth-scan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

Language:JavaGPL-3.018200

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

47300

WhereToGo

WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find entry points to the organization data.

11100