Alganad

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

xnLinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

keyFinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

rsa_sign2n

Deriving RSA public keys from message-signature pairs

anew

A tool for adding new lines to files, skipping duplicates

WordList

XSStrike

Most advanced XSS scanner.

dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

bbot

A recursive internet scanner for hackers.

bbFuzzing.txt

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

SubOver

A Powerful Subdomain Takeover Tool

subjack

Subdomain Takeover tool written in Go

ppfuzz

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

kiterunner

Contextual Content Discovery Tool

trufflehog

Find and verify secrets

alterx

Fast and customizable subdomain wordlist generator using DSL

MurMurHash

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

gmapsapiscanner

WAF-bypass-xss-payloads

XSS payloads for bypassing WAF. This repository is updating continuously.

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

viewgen

Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys