BuildGK

3klCon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

AllAboutBugBounty

All about bug websites (bypasses, payloads, and etc)

app-sec-wiki

Files for appsecwiki.com

Application-Security-Engineer-Interview-Questions

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

Automated-Scanner

Trying to make automated recon for bug bounties

AutoRecon

Just a shell script I wrote to make recon easier for bug bounties.

AwesomeXSS

Awesome XSS stuff

bashbunny-payloads

Payloads for the Hak5 Bash Bunny

bountyRecon

Just an initiative for automating bug bounty recon

burp-bounty-profiles

Burp Bounty profiles compilation, feel free to contribute!

Cheatsheet-God

Penetration Testing / OSCP Biggest Reference Bank / Cheatsheet

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

cookieStealer

A cookie stealer disguised as a gif image

Findomain

The fastest and cross-platform subdomain enumerator, do not waste your time.

HydraRecon

All In One, Fast, Easy Recon Tool

LazyRecon

An automated approach to performing recon for bug bounty hunting and penetration testing.

MindAPI

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

OneListForAll

Rockyou for web fuzzing

OSCP

OSCP cheet sheet

OSCP-Prep

A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

:no_entry: offsec batteries included

pentest-book

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

Rock-ON

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

SQLInjectionWiki

A wiki focusing on aggregating and documenting various SQL injection methods

Taken

Takeover AWS ips and have a working POC for Subdomain Takeover.

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1