DanteDMC4

RegHex

A collection of regexes for every possbile use

tradeapis

stock market data helpers including api clients for polygon and tradier

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

github-dorks

Find leaked secrets via github search

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

spyhunt

recon for bug hunters

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

apkscan

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

CloudRecon

regulator

Automated learning of regexes for DNS discovery

osmedeus

A Workflow Engine for Offensive Security

Bug-Bounty

Bug Bounty Resources from Scratch to start Hunting Bugs

payload

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

Parth

Heuristic Vulnerable Parameter Scanner

wroxy-rotate

rsescan

RSEScan is a command-line utility for interacting with the RSECloud. It allows you to fetch subdomains and IPs from certificates for a given domain or organization.

scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

bypass-403

A simple script just made for self use for bypassing 403

Oralyzer

Open Redirection Analyzer

dirsearch

Web path scanner

SpoofThatMail

Bash script to check if a domain or list of domains can be spoofed based in DMARC records

Dome

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

bugbounty-targets

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.

highly-skilled-job-offers

Sharing some info around job offers and interviews preparations

awesome-design

🌟 Curated design resources from all over the world.

omakub

Opinionated Ubuntu Setup

OneDorkForAll

An insane list of all dorks taken from everywhere from various different sources.