PushkraJ99

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

NucleiFuzzer

NucleiFuzzer is a Powerful Automation Tool for Detecting XSS , SQLI , SSRF , Open-Redirect etc.. Vulnerabilities in Web Applications

ParamSpiderr

Mining URLs from Dark Corners of Web Archives for bug hunting / Fuzzing/ Further probing

CDNRECON

CDNRECON is a tool that is designed to uncover the origin/backend IP behind a CDN's reverse proxy. It is written in Python3 and uses various techniques such as header analysis and DNS lookups to try and discover the origin IP of a website behind a CDN.

TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

Burpsuitepro

Shodan-Dorker

Shodan Dork Automation Website

WhoDupMe

xss_vibes

A modern tool written in Python that automates your xss findings.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

bug-bounties

⚔️ A compiled list of companies who have active programs for responsible disclosure

BugBlaze

Continuous Reconnaissance and Vulnerability Scanning for Bug Bounties

chaospy

Small Tool written based on chaos from projectdiscovery.io

CVE-2023-46805

Scanner for CVE-2023-46805 - Ivanti Connect Secure

ffufPostprocessing

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

G0BurpSQLmaPI

IOT

LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

OneDorkForAll

An insane list of all dorks taken from everywhere from various different sources.

pdf-exploit

POC Pdf-exploit builder on C#

Project

QCSuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

reconizer

Reconizer is all-in-one subdomain enumeration tool that has capabilities to find the maximum number of subdomains of a root domain.

scripthunter

Tool to find JavaScript files on Websites

spyhunt

recon for bug hunters

sqlmc

Check all urls of a domain for SQL injections :)

SSTImap

Automatic SSTI detection tool with interactive interface

subzy

Subdomain Takeover Vulnerability Checker

SVG-Payloads

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.