SalemNabeelSalem

Lilly

Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, all the possible IPs, PORTs and SSL/TLS Certs are searched to validate the target in-scope.

Interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

wordlists

Automated & Manual Wordlists provided by Assetnote

cname-check

Check if the subdomains have cnames to the same tld or 3rd party service

HostileSubBruteforcer

subzy

Subdomain takeover vulnerability checker

ipscan

Angry IP Scanner - fast and friendly network scanner

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

node

Node.js JavaScript runtime ✨🐢🚀✨

jan

Jan is an open source alternative to ChatGPT that runs 100% offline on your computer. Multiple engine support (llama.cpp, TensorRT-LLM)

ConEmu

Customizable Windows terminal with tabs, splits, quake-style, hotkeys and more

ArabicWebAppsPentesting

This repo will contain POC, demo files, and any links given during the Arab web application penetration testing course.

anytype-ts

Official Anytype client for MacOS, Linux, and Windows

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

bhedak

A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

airixss

Finding XSS during recon

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

composer

Dependency Manager for PHP

pyenv

Simple Python version management

bugbounty.zip

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

XSS-LOADER

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Wordpress-BruteForce-List

WordPress Bruteforce List, Default paths and endpoints

haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

curl

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

dirsearch

Web path scanner

terminal

The new Windows Terminal and the original Windows console host, all in the same place!