Jinovas

followers

following

stars

CatSec

CuriousKitty's starred repositories

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Language:C#NOASSERTION15853 219 184

RustScan

🤖 The Modern Port Scanner 🤖

Language:RustGPL-3.014287 133 247

ffuf

Fast web fuzzer written in Go

Language:GoMIT12351 156 518

pyinstaller

Freeze (package) Python programs into stand-alone executables

Language:PythonNOASSERTION11773 230 5375

subfinder

Fast passive subdomain enumeration tool.

Language:GoMIT10030 155 447

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Language:JavaScriptMIT9075 198 1513

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

GPL-3.09005 428 15

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

Language:ShellMIT6965 195 29

linux-exploit-suggester

Linux privilege escalation auditing tool

Language:ShellGPL-3.05583 127 29

apkleaks

Scanning APK file for URIs, endpoints & secrets.

Language:PythonApache-2.04875 79 58

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

Language:PythonNOASSERTION4135 123 130

regexlearn.com

Learn RegEx step by step, from zero to advanced.

Language:TypeScriptMIT3460 18 238

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

Language:ShellGPL-3.03402 57 47

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Language:GoGPL-3.03004 44 163

assetfinder

Find domains and subdomains related to a given domain

Language:GoMIT2986 47 39

kiterunner

Contextual Content Discovery Tool

Language:GoAGPL-3.02603 40 48

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

Apache-2.02453 55 22

toutatis

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

Language:PythonGPL-3.01965 39 88

evilgophish

evilginx3 + gophish

Language:GoMIT1619 35 6

T-Header

Termux customization with your own name (termux-banner + custom PS1) and oh-my-zsh themes with plugins

Language:Shell607 48 37

bugbounty

Bugbounty Resources

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

XRCross

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

Language:ShellMIT326 11 9

fileless-xec

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)

Language:GoMIT182 8 5

EvilNet

Network Attack wifi attack vlan attack arp attack Mac Attack Attack revealed etc../

Language:PythonMIT124 16 1

ShonyDanza

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Language:PythonMIT115 4 3

dictionaries

curated password lists and various other lists/dictionaries for security things

magicspoofing

Magicspoofing it's a python script that checks & test SPF/DMARC DNS records an tries to spoof a domain with a open relay mail system.

Language:Python40 1 3

PythonADB

Android Debug Bridge (ADB) basic wrapper in Python, with timeout support in case of long operations

Language:PythonMIT22 3 3