RogueSMG

theHarvester

E-mails, subdomains and names Harvester - OSINT

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

cvemap

Navigate the CVE jungle with ease.

mubeng

An incredibly fast proxy checker & IP rotator with ease.

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

shortscan

An IIS short filename enumeration tool

BurpSuiteSharpener

ThreatPinchLookup

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

XRCross

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

gungnir

CT Log Scanner

freq

This is go CLI tool for send fast Multiple get HTTP request.

burp-vps-proxy

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

sub.Monitor

Self-hosted passive subdomain continous monitoring tool.

truegaze

Static analysis tool for Android/iOS apps focusing on security issues outside the source code

apkd

APK downloader from few sources

wordlistgen

Generates target specific word lists for Fuzzing with fuff

duo-bypass

Stuff after reverse engineering DUO's mobile app.

CVE-2021-23017-PoC

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

related-domains

Find related domains of a given domain.

burp-digitalocean-droplet-proxy

Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet

deduplicate

Remove duplicate urls from input

duo-cli

Duo Command Line App

ScanApi

Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.

Task_Hijacking_Strandhogg

A Proof of Concept for demonstrating Task hijacking in Android using an attacker and a victim app.

BurpSuite-CustomHeader

This repository is for adding custom header extension developed for medium blog.

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 Apache <= 2.4.48 SSRF exploit