OffXec

bug-bounty-Dorks-1

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PUSHA

"Pusha 1.0" is a fully automated advanced penatration "command shell" made in Python 3.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

Bashter

Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)

Osmedeus

Fully automated offensive security tool for reconnaissance and vulnerability scanning

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

ScanQLi

SQLi scanner to detect SQL vulns

Thief

Subdomain hijack automation.

webHunt

Web App bug hunting

wpbullet

A static code analysis for WordPress (and PHP)

android-security-awesome

A collection of android security related resources

assetfinder

Find domains and subdomains related to a given domain

awesome-bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

dirmap

An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

hack-your-university

A list of universities with vulnerability disclosure policies

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

RubyByExample

Ruby by example. Short, sweet & simple.

selenium-ide

Open Source record and playback test automation for the web.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

welcome

Brief Introduction

aquaHelper

Work in Progress.

Arjun

HTTP parameter discovery suite.

awesome-termux-hacking

⚡️An awesome list of the best Termux hacking tools

bugcrowd_university

Open source education content for the researcher community

Codespaces

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

OWASP-Testing-Guide-v5