Shirshakhtml

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

favihunter

Hunting assets on the internet using favicon hashes

Metasploit-Plugins

Plugins for Metasploit Framework

darkarmour

Windows AV Evasion

Mythic

A collaborative, multi-platform, red teaming framework

SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

unfurl

Pull out bits of URLs provided on stdin

roboxtractor

Extract endpoints marked as disallow in robots files to generate wordlists.

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

eyeballer

Convolutional neural network for analyzing pentest screenshots

readme-typing-svg

⚡ Dynamically generated, customizable SVG that gives the appearance of typing and deleting text for use on your profile page, repositories, or website.

github-subdomains

Find subdomains on GitHub.

Offensive-Payloads

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

subzy

Subdomain takeover vulnerability checker

unmap

Unpack a JavaScript Source Map back into filesystem structure

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

40k-nuclei-templates

40,000+ Nuclei templates for security scanning and detection across diverse web applications and services

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

dnscan

linux-for-OSINT-21-day

In this repository you will find sample commands and test files for each day of the course "Linux for OSINT. A 21-day course for beginners".

reverse-shell-generator

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

webpwn3r

WebPwn3r - Web Applications Security Scanner.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

ghsec-jaeles-signatures

Signatures for jaeles scanner by @j3ssie

FUZZING

Collected fuzzing payloads from different resources

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

subjack

Subdomain Takeover tool written in Go

gitleaks

Protect and discover secrets using Gitleaks 🔑

git-hound

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.