Beast code in Giters

Matin7697's starred repositories

hashcat

World's fastest and most advanced password recovery utility

Language:C20998 508 2071

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Language:HTMLGPL-3.010716 144 47

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Language:CNOASSERTION10119 265 3188

nikto

Nikto web server scanner

Language:PerlNOASSERTION8427 281 457

osint_stuff_tool_collection

A collection of several hundred online tools for OSINT

Language:HTML5323 134 17

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Language:PythonBSD-3-Clause5203 140 98

knock

Knock Subdomain Scan

Language:PythonGPL-3.03849 135 86

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

Language:RustGPL-3.03283 59 160

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Language:PythonMIT1683 15 45

bruteforce-lists

Some files for bruteforcing certain things.

Apache-2.01130 350

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

Language:Python636 25 7

jsmon

a javascript change monitoring tool for bugbounties

Language:PythonMIT584 15 10

haktrails

Golang client for querying SecurityTrails API data

Language:GoMIT534 10 12

hakcheckurl

Takes a list of URLs and returns their HTTP response codes

Language:GoMIT389 8 6

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

Language:PythonMIT320 4 13

urless

De-clutter a list of URLs

Language:Python307 7 9

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

Language:PythonMIT295 4 2

zeek-cheatsheets

Zeek Log Cheatsheets

NOASSERTION283 330

ActiveMQ-RCE

ActiveMQ RCE (CVE-2023-46604) 漏洞利用工具

Language:Go221 4 6

Forbidden-Buster

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk.

Language:PythonMIT157 4 2