PushkraJ99

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

NucleiFuzzer

NucleiFuzzer is a Powerful Automation Tool for Detecting XSS , SQLI , SSRF , Open-Redirect etc.. Vulnerabilities in Web Applications

ParamSpiderr

Mining URLs from Dark Corners of Web Archives for bug hunting / Fuzzing/ Further probing

CDNRECON

CDNRECON is a tool that is designed to uncover the origin/backend IP behind a CDN's reverse proxy. It is written in Python3 and uses various techniques such as header analysis and DNS lookups to try and discover the origin IP of a website behind a CDN.

TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

Burpsuitepro

Shodan-Dorker

Shodan Dork Automation Website

WhoDupMe

apkleaks

Scanning APK file for URIs, endpoints & secrets.

bug-bounties

⚔️ A compiled list of companies who have active programs for responsible disclosure

BugBlaze

Continuous Reconnaissance and Vulnerability Scanning for Bug Bounties

chaospy

Small Tool written based on chaos from projectdiscovery.io

CloudflareBypassForScraping

A cloudflare verification bypass script for webscraping

ffufPostprocessing

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

fm_transmitter

Raspberry Pi as FM transmitter ( Radio Frequency Hijacker )

freedium-browser-extension

Browser extension to easily open Medium articles in Freedium to bypass paywall

G0BurpSQLmaPI

IOT

LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

pdf-exploit

POC Pdf-exploit builder on C#

Project

QCSuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

reconfavicon

is a Favicon Investigation Toolkit that allows you to analyze and gather information about website favicons.

spyhunt

recon for bug hunters

sqlmc

Check all urls of a domain for SQL injections :)

SSTImap

Automatic SSTI detection tool with interactive interface

subzy

Subdomain Takeover Vulnerability Checker

SVG-Payloads

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting