MuizzuddinRifqi

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

WhatWeb

Next generation web scanner

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

OSINT-Projects-for-Beginners

Get hands-on with OSINT tools such as Recon-ng, Maltego, Shodan and Sherlock

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

Arjun

HTTP parameter discovery suite.

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

gospider

Gospider - Fast web spider written in Go

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

seeker

Accurately Locate Smartphones using Social Engineering

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

crt.sh

Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.

censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

chaos-client

Go client to communicate with Chaos DB API.

Sublist3r

Fast subdomains enumeration tool for penetration testers

knock

Knock Subdomain Scan

assetfinder

Find domains and subdomains related to a given domain

amass

In-depth attack surface mapping and asset discovery

subfinder

Fast passive subdomain enumeration tool.

thc-hydra

hydra

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

geowifi

Search WiFi geolocation data by BSSID and SSID on different public databases.

ShellPhish

Modded version of shellphish. Mod Features are Colourized Text, Animations, In built setup for Termux, Extra features, More improvements, Bugs cleared, Fixed URL not showing.

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Cybersecurity-Indonesia

Kumpulan Course Video pembalajaran tentang Cyber Security & Hacking secara GRATIS, repositori ini akan membantu kita dalam proses pembelajaran untuk menjadi seorang IT Security, Pentester, Security Engineer, Security Operation Center dan masih banyak lagi yang di dalam ruang lingkup Information Security. Jika ingin berkontribusi ke repository ini, silahkan tekan tombol "Pull request".

project-fantastic