Lopseg

Jsdir

Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.

nuclei-c-templates

Custom nuclei templates

jssecrets

Simple automation tool to find sensitive data in JS files

DomainSleuth

DomainSleuth is a versatile and user-friendly command-line tool for discovering valuable information about target domains and their subdomains, making it a handy addition to any bug bounty hunter's toolkit.

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

dependconfusion-x

DependConfusion-X Tool is written in Python3 that scans and monitors list of hosts for Dependency Confusion

hacking-books

Unforbid

403/401 Bypass Methods + Bash Automation

AG

Simple Genetic algorithm rewrited in Python

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

Arjun

HTTP parameter discovery suite.

Auto_Wordlists

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

AwesomeXSS

Awesome XSS stuff

brutas

Wordlists and passwords handcrafted with ♥

CRLF-Injection-Scanner

Command line tool for testing CRLF injection on list of domains.

CVE-2022-1388

POC for CVE-2022-1388

dirsearch

Web path scanner

example

fast-detects

JSPyrate

JSScanner

Js File Scanner

knock

Knock Subdomain Scan

lists4fuzz

Multiple wordlists for fuzzing

lopfuzz

Usefull wordlists

markdownsectest

Security test in markdown

Mindmap

pentest-tools

Custom pentesting tools

w

Usefull wordlists

Wordlists

Various Payload wordlists