DevilKing257

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

faas

OpenFaaS - Serverless Functions Made Simple

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

XSStrike

Most advanced XSS scanner.

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

wfuzz

Web application fuzzer

AwesomeXSS

Awesome XSS stuff

LinkFinder

A python script that finds endpoints in JavaScript files

Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

fuxploider

File upload vulnerability scanner and exploitation tool.

bugcrowd_university

Open source education content for the researcher community

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

ReconDog

Reconnaissance Swiss Army Knife

Hash-Buster

Crack hashes in seconds.

lemongraph

Log-based transactional graph engine

workshop

Learn Serverless for Kubernetes with OpenFaaS

Powerful-Plugins

Powerful plugins and add-ons for hackers

vulnerability-rating-taxonomy

Bugcrowd’s baseline priority ratings for common security vulnerabilities

hackbox

HackBox is a powerful and comprehensive tool that combines a variety of techniques for web application and network security assessments, including XSS testing, subdomain scanning, SSRF injection, and more. Its user-friendly interface and wide range of features make it a valuable asset for security professionals.

timely

Accumulo backed time series database

Log-killer

Clear all your logs in [linux/windows] servers 🛡️

webvulscan

Web Application Vulnerability Scanner.

pentest_scripts

penetration testing scripts

Resources

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

readhook

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

securitymatter